Information Systems Security Officer (ISSO)

Canvas Inc.; Eglin Air Force Base (FL); On-site; USD 110,000 - 150,000; Full time

Job summary

Canvas Inc. seeks a cybersecurity professional to manage all phases of our information systems security program, ensuring compliance with security plans and policy mandates at the DoD/USA**F** level.

You will develop, update, and maintain ATO documentation and support continuous monitoring using eMASS and ACAS tools. Responsibilities include auditing systems, applying NIST SP 800-53 controls and STIG/SRG guidance, and coordinating vulnerability remediation while reporting incidents per USAF

Qualifications

• Experience implementing RMF and DoD/Air Force guidance.
• Experience with Authorization to Operate (ATO) packages and continuous monitoring.

Responsibilities

• Carry out all phases of information systems/networks security program.
• Conduct regular audits to ensure secure operations and policy compliance.
• Develop and manage ATO packages and maintain eMASS records.
• Execute continuous monitoring: review logs, analyze scans, verify baselines.

Tools

ACAS

eMASS

NIST RMF

Job description

Essential Duties and Responsibilities

• Under general direction, this role carries out all phases of information systems/networks security program that involves access to computers and computerized data enabling company to meet contractual requirements for networkssecurity.
• Conducts regular audits to ensure that systems are being operated securely, and information systems security policies andprocedures are being implemented as defined in security plans.
• Develop, update, and manage Authorization to Operate (ATO) packages. Navigate and maintain system records within the Enterprise Mission Assurance Support Service (eMASS).
• Execute continuous monitoring strategies. Review audit logs, analyze vulnerability scans, and verify system configuration baselines remain intact.
• Implement, enforce, and assessNIST SP 800-53security controls. Apply and verify Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
• Utilize the Assured Compliance Assessment Solution (ACAS) to scan for, identify, and coordinate the remediation of system vulnerabilities.
• Identify, report, and track cybersecurity incidents and data spills in accordance with USAF and DoW incident response directives.
• Draft, review, and maintain System Security Plans (SSP), continuous tracking of Plan of Action and Milestones (POA&M), and system-specific operating procedures.
• Deep understanding of the NIST RMF lifecycle, DoDI 8510.01, and USAF-specific guidance (e.g., AFI 17-101, Risk Management Framework for Air Force Information Technology).