Junior Information Systems Security Officer (ISSO)

Information Systems Solutions (ISS) is seeking a Junior Information Systems Security Officer (ISSO) to support the Office of Naval Intelligence. In this role, you will assist in ensuring the security and compliance of information systems in accordance with Department of Defense and federal cybersecurity requirements. The ideal candidate will support the implementation of the NIST Risk Management Framework (RMF), maintain system security documentation, and participate in continuous monitoring activities to help ensure systems remain secure and maintain their authorization status. This position is well suited for candidates looking to build their experience in DoD cybersecurity, compliance, and information assurance while working as part of an experienced security team.

100% onsite

Specific duties include, but are not limited to the following:

· Support RMF lifecycle activities by maintaining Authorization & Accreditation (A&A) documentation, implementing security controls, and assisting with system authorization efforts using eMASS and Xacta.

· Conduct vulnerability assessments and continuous monitoring using ACAS, SCAP, Retina, and CIS Benchmarks, tracking findings through remediation and validating compliance with DON cybersecurity requirements.

· Ensure compliance with NAVINTEL ICD 503 and Department of the Navy cybersecurity policies by reviewing system security posture, documenting risks, and supporting security control assessments.

· Collaborate with system administrators, engineers, and stakeholders to resolve cybersecurity issues, prepare security reports, and maintain accurate security documentation.

Clearance Level

TS/SCI clearance

Certifications (IAT Level II), * 1-2 years of experience in cybersecurity or a related field

• Knowledge of NAVINTEL ICD 503 Risk Management Framework (RMF) implementation policies and directives
• Knowledge of Department of the Navy (DON) cybersecurity policies and directives
• Experience with automated cybersecurity assessment tools, including:
• Assured Compliance Assessment Solution (ACAS)
• Center for Internet Security (CIS) Benchmarks
• Security Content Automation Protocol (SCAP)
• Retina
• Experience supporting cybersecurity documentation, including Authorization and Accreditation (A&A) and RMF artifacts
• Basic knowledge of cloud service models (Software as a Service, Platform as a Service, Infrastructure as a Service)
• Basic knowledge of cloud deployment models (public, private, hybrid, and community) and associated architectures
• Ability to develop security control assessment procedures and test statements using Governance, Risk, and Compliance (GRC) tools such as eMASS and Xacta

Professional Qualities:

• Effective written and verbal communication skills
• Strong organizational skills and attention to detail
• Ability to work effectively in a team environment
• Ability to adapt to changing requirements and operational priorities
• Ability to follow established procedures and directions
• Adherence to the established chain of command when addressing issues or inquiries
• Demonstrated desire to learn, grow, and develop professionally within the cybersecurity field

At ISS we pride ourselves on providing an employee-focused and family first environment. Being a small business, we take the time to get to know our employees and have a vested interest in helping them achieve their career goals. We work to schedule regular social gatherings within the company to foster camaraderie. ISS values their employees by providing a comprehensive benefits package that includes a fully vested 401(k) matching program, coverage of family medical deductibles, spot bonuses, and educational assistance to further your career.