Required:
- Minimum of 10 years of relevant cybersecurity, information assurance, RMF, or Certification & Accreditation experience.
- Must hold one of the following certifications:
- CISSP
- CASP+
- CompTIA Security+
- CEH
- Equivalent DoD 8140/8570-compliant Information Assurance certification
- Strong knowledge of the NIST Risk Management Framework (RMF) and system authorization lifecycle.
- Experience implementing, assessing, and maintaining security controls in accordance with federal and DoD requirements.
- Working knowledge of security control baselines, system security documentation, and continuous monitoring requirements.
- Experience supporting Authority to Operate (ATO) efforts and system accreditation activities.
- Knowledge of information systems technologies, including networks, operating systems, processing platforms, and enterprise environments.
- Experience supporting Windows, UNIX/Linux, and other operating system environments.
Desired:
- Experience developing RMF accreditation packages and authorization documentation.
- Experience supporting Navy, NAVAIR, or other DoD cybersecurity programs.
- Experience serving as an ISSO, ISSM, Information Assurance Manager (IAM), or Information Assurance Officer (IAO).
- Experience supporting cybersecurity inspections, audits, and security assessments.
- Familiarity with eMASS and DoD cybersecurity compliance tools.
- Experience developing cybersecurity policies, procedures, and training materials.
Education:
High School Diploma or GED required. Additional technical education or cybersecurity-related coursework preferred.
Security Clearance:
Active Top Secret clearance required with the ability to obtain Special Access Program (SAP) access. Requirements to obtain a clearance include US Citizenship, security investigation, etc.
Saalex is seeking a Senior Information Systems Security Officer (ISSO) in Camarillo/Naval Air Station Point Mugu, CA to support cybersecurity, Risk Management Framework (RMF), and Certification & Accreditation (C&A) activities. The selected candidate will serve as a key cybersecurity resource responsible for supporting system authorization efforts, maintaining security compliance, implementing information assurance policies, and ensuring systems maintain Authority to Operate (ATO) status. This position requires a strong understanding of RMF, cybersecurity compliance, system accreditation, and DoD information assurance requirements.
Position Type: Full-Time
Salary: $145k - $180k annually (depending on experience)
Work Location: Onsite – NAS Point Mugu, CA
Essential Functions:
- Serve as the Sr. Information Systems Security Officer (ISSO) supporting Certification & Accreditation (C&A) activities for multiple systems and programs.
- Prepare, maintain, submit, and update RMF and accreditation documentation required to achieve and maintain system authorization.
- Support Authority to Operate (ATO) efforts and continuous monitoring activities throughout the system lifecycle.
- Ensure implementation of security policies, procedures, and controls established by the Information Systems Security Manager (ISSM).
- Maintain knowledge of current information assurance, cybersecurity, and RMF requirements, policies, directives, and emerging technologies.
- Assess information systems and operating environments to ensure compliance with applicable security requirements.
- Support security control implementation, assessment, remediation, and documentation activities.
- Assist with the development and maintenance of system security documentation, policies, procedures, and compliance artifacts.
- Conduct management studies and evaluations focused on cybersecurity compliance and procedural effectiveness.
- Develop division-level policies and procedures to ensure compliance with DoD and organizational cybersecurity requirements.
- Coordinate required cybersecurity activities, milestones, reviews, and compliance efforts to ensure timely execution.
- Provide cybersecurity guidance and recommendations to technical staff, management, and government stakeholders.
- Deliver security awareness and cybersecurity-related training to assigned personnel.
- Review technical documentation, contracts, reports, and program deliverables for security and compliance requirements.
- Support configuration management processes and ensure documentation complies with applicable organizational standards.
- Perform technical research and complex information gathering activities in support of cybersecurity initiatives.
- Attend conferences, training sessions, and professional development activities to maintain technical proficiency.
- Other duties as assigned or required.
- Employer Paid Health Care Plans for Employees & Family
- Retirement Plan (401k, IRA)
- Life Insurance (Basic, Voluntary & AD&D)
- Paid Time Off (Vacation, Sick & Public Holidays)
- Short Term & Long Term Disability
- Training & Development
- Wellness Resources
- Stock Option Benefit
