Senior Information Systems Security Officer (ISSO)

Saalex is seeking a Senior Information Systems Security Officer (ISSO) in Camarillo/Naval Air Station Point Mugu, CA to support cybersecurity, Risk Management Framework (RMF), and Certification & Accreditation (C&A) activities. The selected candidate will serve as a key cybersecurity resource responsible for supporting system authorization efforts, maintaining security compliance, implementing information assurance policies, and ensuring systems maintain Authority to Operate (ATO) status. This position requires a strong understanding of RMF, cybersecurity compliance, system accreditation, and DoD information assurance requirements.

Position Type: Full-Time

Salary: $145k - $180k annually (depending on experience)

Work Location: Onsite – NAS Point Mugu, CA

Essential Functions:

• Serve as the Sr. Information Systems Security Officer (ISSO) supporting Certification & Accreditation (C&A) activities for multiple systems and programs.
• Prepare, maintain, submit, and update RMF and accreditation documentation required to achieve and maintain system authorization.
• Support Authority to Operate (ATO) efforts and continuous monitoring activities throughout the system lifecycle.
• Ensure implementation of security policies, procedures, and controls established by the Information Systems Security Manager (ISSM).
• Maintain knowledge of current information assurance, cybersecurity, and RMF requirements, policies, directives, and emerging technologies.
• Assess information systems and operating environments to ensure compliance with applicable security requirements.
• Support security control implementation, assessment, remediation, and documentation activities.
• Assist with the development and maintenance of system security documentation, policies, procedures, and compliance artifacts.
• Conduct management studies and evaluations focused on cybersecurity compliance and procedural effectiveness.
• Develop division-level policies and procedures to ensure compliance with DoD and organizational cybersecurity requirements.
• Coordinate required cybersecurity activities, milestones, reviews, and compliance efforts to ensure timely execution.
• Provide cybersecurity guidance and recommendations to technical staff, management, and government stakeholders.
• Deliver security awareness and cybersecurity-related training to assigned personnel.
• Review technical documentation, contracts, reports, and program deliverables for security and compliance requirements.
• Support configuration management processes and ensure documentation complies with applicable organizational standards.
• Perform technical research and complex information gathering activities in support of cybersecurity initiatives.
• Attend conferences, training sessions, and professional development activities to maintain technical proficiency.
• Other duties as assigned or required.

Requirements

Required:

• Minimum of 10 years of relevant cybersecurity, information assurance, RMF, or Certification & Accreditation experience.
• Must hold one of the following certifications:
• CISSP
• CASP+
• CompTIA Security+
• CEH
• Equivalent DoD 8140/8570-compliant Information Assurance certification
• Strong knowledge of the NIST Risk Management Framework (RMF) and system authorization lifecycle.
• Experience implementing, assessing, and maintaining security controls in accordance with federal and DoD requirements.
• Working knowledge of security control baselines, system security documentation, and continuous monitoring requirements.
• Experience supporting Authority to Operate (ATO) efforts and system accreditation activities.
• Knowledge of information systems technologies, including networks, operating systems, processing platforms, and enterprise environments.
• Experience supporting Windows, UNIX/Linux, and other operating system environments.

Desired:

• Experience developing RMF accreditation packages and authorization documentation.
• Experience supporting Navy, NAVAIR, or other DoD cybersecurity programs.
• Experience serving as an ISSO, ISSM, Information Assurance Manager (IAM), or Information Assurance Officer (IAO).
• Experience supporting cybersecurity inspections, audits, and security assessments.
• Familiarity with eMASS and DoD cybersecurity compliance tools.
• Experience developing cybersecurity policies, procedures, and training materials.

Education:

High School Diploma or GED required. Additional technical education or cybersecurity-related coursework preferred.

Security Clearance:

Active Top Secret clearance required with the ability to obtain Special Access Program (SAP) access. Requirements to obtain a clearance include US Citizenship, security investigation, etc.