ISSO: RMF & Cyber Risk Leader (Oahu)

familyofcompanies; Hawaii; On-site; USD 126,000 - 154,000; Full time

Benefits offered by this job

401K plan with company match

Medical insurance

Dental insurance

Disability insurance

Life insurance

Tuition reimbursement

Paid time off

11 paid holidays

Job summary

Bering-Alaka`ina Holdings, LLC is seeking an experienced Information System Security Officer (ISSO) to strengthen cybersecurity posture and RMF/ATO processes for government systems on Oahu, Hawai'i.

The role collaborates with ISSMs, system owners, and authorizing officials to ensure continuous compliance with NIST guidelines and federal security requirements, including documentation in eMASS/Xacta and participation in CCBs.

Qualifications

• Experience executing A&A workflows to achieve ATO.
• Ability to interpret DISA STIGs, SCAP, and ACAS scans.
• Experience with host baselines (Linux/Windows/Cloud).
• Proficient with governance tools and continuous monitoring.

Responsibilities

• Oversee RMF lifecycle from Step 1 to 6 with proper documentation in eMASS/Xacta.
• Validate NIST SP 800-53 controls and remediate deficiencies.
• Review automated scans (ACAS, Nessus, SCAP) and verify mitigations.
• Develop and track POA&Ms for timely vulnerability closure.
• Maintain SSPs, Contingency/Incident/Continuous Monitoring/CM Plans.
• Participate in CCBs evaluating security impacts of changes.
• Assist with incident investigations and continuous audit reviews.
• Other duties as assigned by Supervisor.

Skills

A&A workflows

RMF lifecycle

NIST SP 800-53

ACAS/Nessus/SCAP

eMASS/Xacta

SIEM (Splunk)

AO/EO communication

Education

Bachelor's Degree in Cybersecurity/Information Systems/CS

DoD 8140 / 8570.01-M IAM Level II/III certs

NIST 800-37/800-53 CNSSI 1253 coursework

Tools

eMASS

Xacta

Archer

Jira

Job description

Bering-Alaka`ina Holdings, LLC is seeking an experienced Information System Security Officer (ISSO) to strengthen cybersecurity posture and RMF/ATO processes for government systems on Oahu, Hawai'i.

The role collaborates with ISSMs, system owners, and authorizing officials to ensure continuous compliance with NIST guidelines and federal security requirements, including documentation in eMASS/Xacta and participation in CCBs.