Senior ISSO: Drive RMF Compliance & ATO Readiness

Bering-Alaka'ina Holdings, LLC; Hawaii; On-site; USD 126,000 - 154,000; Full time

Benefits offered by this job

401K plan with company match

medical, dental, disability, and life

tuition reimbursement

paid time off

11 paid holidays

Job summary

Bering-Alaka’ina Holdings, LLC seeks an experienced Information System Security Officer (ISSO) to strengthen the cybersecurity posture for mission-critical government systems on Oahu, Hawai'i. You will lead RMF activities, ensure NIST guidelines are followed, and support authorization lifecycles.

The role requires TS/SCI clearance, DoD 8140/8570 proficiency, hands-on A&A, vulnerability management, and collaboration with ISSMs, system owners, and AO.

Qualifications

• Bachelor's degree in a related field and DoD 8140/8570.01-M IAM certifications.
• 4+ years of A&A experience to achieve ATO, ATC, and cross-domain validations.
• Experience with NIST SP 800-37/53 Rev 5, CNSSI, eMASS/Xacta administration.

Responsibilities

• Oversee RMF lifecycle steps 1–6 with thorough documentation.
• Validate NIST SP 800-53 controls and remediation strategies.
• Review ACAS/Nessus scans, verify mitigations, and track POA&M items.
• Maintain SSPs, Contingency/Incident/Continuous Monitoring/Config Plans.
• Participate in CCBs and assist in security investigations.

Skills

A&A Workflows

NIST SP 800-53

RMF Lifecycle

ATC / cross-domain

Vulnerability scanning

eMASS / Xacta

SIEM (Splunk)

SIEM (Elastic)

Archer / Jira

AO / risk metrics

Education

Bachelor's Degree in Cybersecurity / Information Systems / Computer Science

Tools

eMASS

Xacta

Archer

Jira

Job description

Bering-Alaka’ina Holdings, LLC seeks an experienced Information System Security Officer (ISSO) to strengthen the cybersecurity posture for mission-critical government systems on Oahu, Hawai'i. You will lead RMF activities, ensure NIST guidelines are followed, and support authorization lifecycles.

The role requires TS/SCI clearance, DoD 8140/8570 proficiency, hands-on A&A, vulnerability management, and collaboration with ISSMs, system owners, and AO.