> Markdown version of [/jobs/ext/4721148-information-systems-security-officer](https://www.wearedevelopers.com/jobs/ext/4721148-information-systems-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Systems Security Officer - **Company:** Chenega Corporation - **Location:** Huntsville, AL, United States - **Experience:** Starter - **Contract:** Permanent contract - **Skills:** Xacta, Microsoft Word, Microsoft Excel, Amazon Web Services, Data Analysis, Microsoft Azure, Microsoft Outlook, Cloud Computing, CompTIA Security+, Cyber Security, Information Systems, Data Visualization, Supervisory Control and Data Acquisition (SCADA), Information Systems Security Architecture Professional, Microsoft Office, Oracle (Applications), PCI Data Security Standards, Microsoft PowerPoint, Systems Development Life Cycle, Google Cloud, SARS Software Products, Cloud Platform System, SC Clearance, Information Technology, Process Control Systems, Operational Systems, Data Management, Plan of Action and Milestones - **Published:** November 14, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9314723/information-systems-security-officer ## About the Role * Bachelor's degree in Science, Technology, Engineering, Mathematics, IT, or business-related programs * 6+ years of experience in cybersecurity, including experience with traditional IT and exposure to/experience with Operational Technology (OT) or Facility-Related Control Systems (FRCS) * 5+ years of experience with RMF, ATO packages, POA&M development, system categorization is required * 3+ years' experience supporting DoD or federal programs is highly desirable * Must have active CompTIA Security+ certification in accordance with DoD 8570/8140 requirements. * Must have active Secret clearance with ability to obtain TS with SCI eligibility. * Successfully pass background and drug screening., * Cybersecurity certifications like CISSP (Certified Information Systems Security Professional), CISA (Certified Information Systems Auditor), or CISM (Certified Information Security Manager), or CGRC (Certified in Governance, Risk and Compliance), is preferred * Additional certifications in OT/ICS security (e.g., SANS GICSP - Global Industrial Cyber Security Professional) or financial security (e.g., PCI-DSS ISA/QSA) are highly desirable. * Prior experience supporting Army Installation Management Command (IMCOM) systems or municipal/base-level utility infrastructure is highly preferred. Knowledge, Skills and Abilities: * Deep understanding of cybersecurity frameworks, risk management, and compliance requirements. * Strong knowledge of cloud and hybrid environments (AWS, Azure, GCP, Oracle) * Experience with eMASS and/or Xacta is required. * Experience with FISMA and security control assessments required. * Experience working in Unix/Linux environment. * Experience working in cloud infrastructures. * Must have high proficiency in the Microsoft Office suite and possess advanced skills and knowledge in programs like Word, Excel, PowerPoint, and Outlook. * Experience extracting, transforming, and structuring data to support both exploratory analytics and operational reporting. * Familiarity with Unified Facilities Criteria (UFC) 4-010-06 (Cybersecurity of Facility-Related Control Systems) and NIST SP 800-82 (Guide to Industrial Control Systems Security). * Strong creative and visual storytelling skills with an eye for design, usability, and user experience. * Strong pedagogical, public speaking, and coaching skills with the ability to explain complex cyber-compliance and RMF concepts to technical and non-technical learners alike. * Understanding of PCI-DSS compliance, credit/debit transaction security, and civilian commercial-off-the-shelf (COTS) networks utilized in NAF/MWR facilities. * Use expert knowledge of data visualization tools to deliver information that allows client users to quickly understand data, ask better questions, and take action. * Possess knowledge and experience with data analysis and data technical expertise in data management, engineering, and science. * Skillful time management and organizational skills to set and meet deadlines. * Ability to work both independently and within a team. * Ability to work effectively in a team environment to encourage collaboration, innovation, and continuous improvement. * Ability to meet minimum clearance requirements. * Ability to work nights, weekends, and holidays as required. * Ability to travel up to 25%. ## Description Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employer's core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level! The Information Systems Security Officer (ISSO) is responsible for overseeing, implementing, and maintaining cybersecurity compliance and security controls for designated Operational Technology (OT), Non-Appropriated Fund (NAF), and traditional Information Technology (IT) systems in support of the Installation Management Command (IMCOM) under the Army Materiel Command (AMC)., * Serve as the primary ISSO supporting assigned information systems throughout the full system development lifecycle. * Implement, assess, and maintain security controls in accordance with appropriate NIST based on technology, DoD cybersecurity policies, and applicable regulatory requirements. * Support cybersecurity lifecycle management for Facility-Related Control Systems (FRCS), Industrial Control Systems (ICS), Supervisory Control and Data Acquisition (SCADA) systems, and building automation architectures unique to IMCOM installations * Support and maintain ATO packages, including system categorization, control implementation, assessment coordination, and continuous monitoring activities. * Apply specialized risk management criteria for OT systems, balancing traditional confidentiality requirements with critical availability and safety requirements inherent to physical infrastructure. * Ensure security compliance for IMCOM NAF systems (including Morale, Welfare, and Recreation [MWR] and lodging environments), aligning RMF controls with applicable payment card industry standards (PCI-DSS) and financial protection regulations. * Develop, review, and maintain system security documentation such as SSPs, POA&Ms, SARs, RARs, and CONMON artifacts. * Ensure compliance with DoD cybersecurity requirements, STIGs, FISMA, and data protection regulations. * Coordinate and support internal and external audits, inspections, and information assurance readiness reviews. * Review IT policies, procedures, and technical documentation to ensure alignment with regulatory and organizational requirements. * Identify compliance gaps, assess risk, and recommend corrective actions or compensating controls. * Maintain awareness of evolving cybersecurity threats, vulnerabilities, and regulatory changes to ensure ongoing compliance. * Provide cybersecurity risk and compliance briefings to program leadership, system owners, and executive stakeholders. * Identify, assess, and document cybersecurity risks and support the development of risk mitigation strategies. * Support the implementation of a structured IT risk management and governance framework. * Assist with development and enforcement of cybersecurity policies and procedures. * Serve as a cybersecurity liaison between technical teams, compliance staff, auditors, and government customers. * Conduct briefings and presentations on cybersecurity posture, compliance status, and non-compliance issues. * Other duties as assigned.