ISSO: DoD Cybersecurity Leader (RMF & Compliance)

Bering Straits Native Corporation (BSNC); Colorado Springs (CO); On-site; USD 110,000 - 170,000; Full time

Job summary

Bering Straits Native Corporation (BSNC) is seeking an Information System Security Officer (ISSO) in Colorado Springs, CO. The role focuses on implementing cybersecurity requirements, RMF processes, and certification activities for assigned information systems.

The ISSO will develop and maintain security documentation, support ATO/ATC/IATT, and conduct audits and vulnerability assessments to ensure compliance with DoD and federal cybersecurity requirements.

Qualifications

• Bachelor's degree in cybersecurity, IT, CS, IS, engineering, math, or related field.
• Minimum 3 years of experience in cybersecurity, information assurance, or related disciplines.
• Experience supporting RMF compliance activities.
• Experience maintaining cybersecurity documentation and authorization artifacts.
• Experience implementing and assessing security controls on information systems.

Responsibilities

• Serve as ISSO responsible for implementing cybersecurity requirements for designated information systems.
• Support RMF activities across the system lifecycle including security control implementation and continuous monitoring.
• Develop and maintain SSPs, POA&Ms, SARs, and other cybersecurity docs.
• Coordinate ATO/ATC/IATT and related accreditation activities.
• Perform periodic reviews of accounts, access, logs, and configurations; investigate incidents.

Skills

RMF familiarity

Vulnerability mgmt

Security controls

Written communication

Education

Bachelor's degree in cybersecurity or related field

Tools

eMASS

Xacta

ACAS

Nessus

Job description

Bering Straits Native Corporation (BSNC) is seeking an Information System Security Officer (ISSO) in Colorado Springs, CO. The role focuses on implementing cybersecurity requirements, RMF processes, and certification activities for assigned information systems.

The ISSO will develop and maintain security documentation, support ATO/ATC/IATT, and conduct audits and vulnerability assessments to ensure compliance with DoD and federal cybersecurity requirements.