Information Systems Security Officer (ISSO) | On-Site | Contingent

Ares Enterprise; Rock Island (IL); Presencial; USD 90.000 - 130.000; Jornada completa

Descripción de la vacante

Ares Enterprise, LLC seeks an Information Systems Security Officer (ISSO) / RMF Specialist to support vital defense intelligence systems at Rock Island Arsenal, Illinois. This on-site, contingent role focuses on IT compliance, RMF lifecycle management, and sustaining Authority to Operate status to ensure secure and reliable delivery of critical data to senior leaders worldwide.

You will lead RMF activities, prepare SSP/SAR/POA&M, manage eMASS, monitor security controls, and coordinate with AOs

Formación

• 5+ years of hands-on RMF experience with DoD IT systems.
• DoD 8570/8140 IAT Level II certifications (e.g., Security+; CCNA; RHCSA; MCSA).
• Experience with eMASS, vulnerability scanning tools (ACAS/Nessus), and STIGs.
• Active Top Secret/SCI clearance.

Responsabilidades

• Lead RMF Lifecycle Management across system categorization, control selection, implementation, assessment and authorization, ensuring continuous ATO.
• Develop and maintain RMF documentation including SSP, SAR, and POA&M.
• Administer security posture within eMASS and ensure timely workflow approvals.
• Implement continuous monitoring and track vulnerabilities and config changes.
• Coordinate with AO/AODR and P-ISSMs to navigate A&A and remediate findings.
• Support compliance with DoD, Army, and NIST regulations.

Conocimientos

RMF Expertise

Security Governance

Clearance: TS/SCI

Educación

DoD 8570/8140 IAT Level II certifications

Herramientas

eMASS

ACAS/Nessus

STIGs

Descripción del empleo

All Jobs > Information Systems Security Officer (ISSO) | On-Site | Contingent

Information Systems Security Officer (ISSO) | On-Site | Contingent
Rock Island Arsenal, Illinois

Full-time

Description

Ares Enterprise, LLC is seeking a dedicated Information Systems Security Officer (ISSO) / RMF Specialist to support vital defense intelligence communication systems. This program delivers comprehensive mission support services focused on IT compliance, Tier 1 user assistance, and operational environment assessments to ensure the secure, reliable, and continuous delivery of critical intelligence data to senior leaders worldwide.

As the primary cybersecurity and compliance lead, you will manage complex IT and intelligence communication systems through the full Risk Management Framework (RMF) lifecycle. In this role, you will maintain secure operations, sustain continuous Authority to Operate (ATO) status, manage security postures within eMASS, and execute robust security governance in direct coordination with Authorizing Officials (AOs) and Program Information System Security Managers (P-ISSMs).

Requirements

Key Responsibilities

• RMF Lifecycle Management: Lead all aspects of the Risk Management Framework (RMF) process from system categorization and security control selection to implementation, assessment, and authorization, ensuring continuous Authority to Operate (ATO).
• Security Documentation: Develop, maintain, and update vital RMF documentation, including the System Security Plan (SSP), Security Assessment Report (SAR), and Plan of Action & Milestones (POA&M).
• eMASS Administration: Manage the system's security posture within the Enterprise Mission Assurance Support System (eMASS), ensuring data accuracy and prompt workflow approvals.
• Continuous Monitoring: Implement and manage robust continuous monitoring strategies to actively assess security control effectiveness, track vulnerabilities, and manage configuration changes.
• Stakeholder Coordination: Serve as a primary security advisor to system owners, liaising with Authorizing Officials (AO/AODR) and Program Information Security System Managers (P-ISSM) to navigate the Assessment and Authorization (A&A) process and remediate STIG findings.
• Compliance & COMSEC Support: Assist in developing cybersecurity programs, reviewing external policies, and ensuring adherence to DoD, Army, and NIST regulations.

Minimum Qualifications

• Experience: Minimum of 5+ years of dedicated, hands-on experience applying RMF to complex Department of Defense (DoD) IT systems.
• Certifications: Must possess current, industry-standard certifications meeting DoD 8570/8140 requirements for IAT Level II (e.g., CompTIA Security+, CCNA, RHCSA, MCSA).
• Technical Skills: Demonstrated mastery of eMASS, vulnerability scanning tools (e.g., ACAS/Nessus), COMSEC, and security compliance checkers (e.g., SCAP).
• Security Clearance: Must possess and actively maintain a Top Secret/SCI security clearance.