Information System Security Officer

Bering-Alaka’ina Associates LLC is looking for an experienced and detail-oriented Information System Security Officer (ISSO) to enhance the cybersecurity posture, assessment, and authorization lifecycle for mission-critical information systems to provide support for our government customer in Oahu, Hawai’i., * Oversee the end-to-end Risk Management Framework (RMF) lifecycle (Steps 1 through 6), ensuring system artifacts and security controls are thoroughly documented and up to date in eMASS or Xacta.

• Validate implementation of NIST SP 800-53 security controls, identify control deficiencies, and formulate achievable remediation strategies.
• Review and analyze automated vulnerability and compliance scans (ACAS/Nessus, SCAP, STIG viewer), correlating findings and verifying mitigation efficacy.
• Develop, track, and maintain comprehensive Plan of Action and Milestones (POA&M) entries to ensure rapid closure of system vulnerabilities and audit findings.
• Author, update, and maintain System Security Plans (SSP), Contingency Plans, Incident Response Plans, Continuous Monitoring Plans, and Configuration Management Plans.
• Participate in Change Control Boards (CCB) to evaluate security impacts of proposed architectural, software, and hardware modifications.
• Assist with cybersecurity event investigations, incident triage, and continuous audit log reviews to ensure integrity across system environments.
• Other duties as assigned by Supervisor.

• Bachelor’s Degree - Accredited B.S. in Cybersecurity, Information Systems, Computer Science, or related field
• DoD 8140 / 8570.01-M IAM Level II or III = CompTIA Security+, Cloud+, CAP, Security X/CASP+, CCISO, CCSP, CISSO, GCSA, GSEC, SSCP, CISM, CISSP, CISSP-ISSMP, FITSP-M, GCIA, GCIH, GICSP, GSLC.
• Federal / DoD Frameworks - Demonstrated coursework or training in NIST SP 800-37, NIST SP 800-53 Rev 5, CNSSI 1253, and eMASS / Xacta administration., * Four plus (4+) years of direct experience executing Assessment & Authorization (A&A) workflows to achieve Authority to Operate (ATO). Experience supporting Authorization to Connect (ATC) and cross-domain solution validations.
• Hands-on experience interpreting DISA STIGs, Security Content Automation Protocol (SCAP), and ACAS vulnerability scans. Experience validating host-level security baselines across Linux, Windows Server, and cloud enclaves (AWS / Azure GovCloud).
• Direct proficiency using governance tools such as eMASS, Xacta, Archer, or Jira for tracking compliance workflows. Experience establishing continuous monitoring strategies using SIEM tools such as Splunk or Elastic Security.
• Demonstrated ability to present complex risk metrics and technical deficiencies to executive leadership and Authorizing Officials (AO). Familiarity with Supply Chain Risk Management (SCRM) and DevSecOps continuous ATO paradigms.

On-site work within a secure facility (SCIF) with occasional travel for site compliance audits.

REQUIRED CITIZENSHIP AND CLEARANCE:

• Must be a U.S. Citizen
• Active Top Secret clearance with immediate eligibility for Sensitive Compartmented Information (TS/SCI)., Delivering high quality, customer-focused products and services through Mission-Synchronized Solutions

• $140,000.00
• The compensation range or hourly rate provided is a good faith estimate at the time of posting. Final compensation will be determined based on qualifications, experience, skills, internal equity, market conditions, and applicable laws.

Bering-Alaka`ina Holdings, LLC is a fast-growing government service provider. Employees enjoy competitive salaries. Eligible employees enjoy a 401K plan with company match; medical, dental, disability, and life insurance coverage; tuition reimbursement; paid time off; and 11 paid holidays.

As a part of BSNC, Bering- Alakaina Holdings gives hiring, promotion, training, and retention preference to BSNC shareholders, descendants and shareholder spouses who meet the minimum qualifications for the job. Qualified job candidates will generally be considered in the following order: BSNC shareholders, descendants, shareholder spouses, current employees, and outside candidates. The BSNC Shareholder Development department tracks and monitors the implementation of the Shareholder Hire Preference across its operations.

Bering-Alakaina Holdings, LLC is comprised of industry-recognized government service firms designated as Alaska Native Corporation (ACN)-owned and 8(a) certified businesses and includes Keaki Technologies, LLC; Laulima Government Solutions, LLC; Kpono Government Services, LLC; Kapili Services, LLC; Po`okela Solutions, LLC; Kkaha Solutions, LLC; and Pololei Solutions, LLC., Kapili Services (Kapili) is a Native Hawaiian Organization (NHO)-Owned 8(a) certified Small Disadvantaged Business (SDB).