Mac Information Systems Security Officer (ISSO)

Job Description

Job Description

We are seeking a highly skilled and dedicated  Mac Information Systems Security Officer (ISSO) to join our team. The ISSO is responsible for the technical security, administration, maintenance, compliance, and ongoing Risk Management Framework (RMF) support of the Naval Surface Forces Public Affairs Office Multimedia Shore-Based Production Tool System (MSPTS).

The ISSO will work closely with the Naval Surface Forces Public Affairs Office (N10P), CNSP N6, the Regional Information Systems Security Manager (ISSM), and designated technical advisors to support the system's progression through RMF Step 3 and toward Authority to Operate (ATO).

This position serves as the primary technical custodian of the MSPTS network, ensuring that security controls, system configurations, vulnerability remediation, technical documentation, and compliance requirements are maintained in accordance with applicable Department of Defense (DoD) and Department of the Navy (DON) cybersecurity directives.

What You'll Do

• RMF and Authority to Operate (ATO)
• Network Security Officering and Administration
• Vulnerability Management and Security Compliance
• eMass, DADMS, and Technical Documentation
• End-User Technical Support
• Coordination and Reporting
• Equipment Procurement, Inventory, and Property Management
• Software Licensing and portfolio Administration

This may look like:

• Support Risk Management Framework (RMF) activities including documentation, evidence, remediation, and continuous monitoring.
• Lead and perform the technical legwork necessary to obtain and maintain ATO for the MSPTS environment in coordination with N10P and under the oversight of CNSP N6.
• Maintain system security posture and coordinate RMF activities with the Regional ISSM, N6, N10P, and authorized Navy personnel.
• Administer and secure Apple Macintosh computers, network equipment, network-attached storage, printers, and related systems.
• Perform vulnerability management, including ACAS scans, STIG/SRG compliance, IAVA/CTO remediation, security assessments, and corrective actions.
• Monitor system configurations, investigate unauthorized devices, evaluate security impacts of system changes, and implement appropriate security controls.
• Maintain eMASS and DADMS records, hardware/software inventories, network diagrams, configuration documentation, and RMF evidence.
• Provide technical support for Public Affairs systems and equipment supporting still imagery, motion imagery, and other mission requirements.
• Coordinate technical issues, security risks, system changes, and RMF requirements with Navy stakeholders and technical authorities.
• Procure, track, inventory, and maintain accountability for media equipment, camera gear, production hardware, peripherals, and other government property.
• Track purchase requests, equipment deliveries, transfers, maintenance, and disposition while maintaining audit-ready property records.
• Administer software licensing portfolios, including Adobe Creative Cloud and specialty production software; manage assignments, renewals, purchasing, and compliance.
• Participate in weekly technical meetings, provide status updates, track deadlines, and proactively identify cybersecurity and operational risks.
• Provide expert guidance and recommendations on security architecture, controls, and tools relevant to the Apple ecosystem.
• Collaborate with IT, engineering, and various business units to integrate security into the lifecycle of Mac deployments and applications.
• Monitor security logs and alerts from Mac devices and related security tools, responding to suspicious activities.
• Stay abreast of the latest macOS security threats, vulnerabilities, and industry trends to proactively enhance our security posture.
• Educate and train users on macOS security best practices and awareness.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
• Security+ CE or another DoD 8570/8140-aligned certification appropriate to the assigned position requirements.
• 5-7 years of progressive experience in information security, with a significant focus on securing macOS environments.
• Demonstrated hands-on experience with the DoD Risk Management Framework (RMF), including RMF documentation, security controls, and ATO support.
• Experience supporting DoD or Department of the Navy cybersecurity programs.
• Deep understanding of macOS operating systems, system internals, and security features.
• Extensive experience with Mobile Device Management (MDM) solutions for Apple devices (e.g., Jamf Pro, Workspace ONE, Microsoft Intune).
• Proficiency in scripting (Bash, Python) for automation of security tasks, reporting, and system configuration on macOS.
• Strong knowledge of common information security frameworks and compliance standards (e.g., NIST, ISO 27001, CIS Benchmarks).
• Experience with vulnerability management, patch management, and security configuration management for Mac fleets.
• Demonstrated ability to perform security assessments, risk analysis, and audit activities.
• Excellent analytical, problem-solving, and communication skills, with the ability to articulate complex security concepts to technical and non-technical audiences.
• Relevant industry certifications such as CISSP, CISM, GIAC (e.g., GSEC, GCWN), or Apple Certified Support Professional (ACSP) are highly desirable.

Nice to Have

• DoD RMF processes and ATO lifecycle activities.
• Experience with forensic tools and techniques specific to macOS incident response.
• Familiarity with cloud security principles and their application in mixed environments (e.g., AWS, Azure, GCP).
• Knowledge of zero-trust security models and their implementation.
• Experience with security automation and orchestration platforms.
• Active participation in the macOS security community or open-source projects.
• ACAS vulnerability scanning and remediation.
• STIGs, SRGs, IAVA/Bs, CTOs, and other DoD cybersecurity directives.
• Network security configurations and access controls.
• System inventory, configuration management, and network diagrams.
• eMASS and DADMS, or comparable government security and asset-management systems.
• Apple Macintosh network environments.

\nCompany Description

Join a veteran-owned team that has delivered on-time, on-budget, and on-target for the Department of Defense and federal agencies since 2014. At ACC3 International you get the stability and support of a big-company contractor with the hands-on, homegrown work ethic of a close-knit team. You'll do work that matters for the warfighter and for government modernization, in a veteran-friendly culture that earned the 2023 ESGR Patriot Award for supporting Guard and Reserve members. We offer competitive benefits, real room to grow as we expand into our own AI and technology platforms, and leaders who value integrity, collaboration, and results. Come build a career with purpose.

Company Description

Join a veteran-owned team that has delivered on-time, on-budget, and on-target for the Department of Defense and federal agencies since 2014. At ACC3 International you get the stability and support of a big-company contractor with the hands-on, homegrown work ethic of a close-knit team. You'll do work that matters for the warfighter and for government modernization, in a veteran-friendly culture that earned the 2023 ESGR Patriot Award for supporting Guard and Reserve members. We offer competitive benefits, real room to grow as we expand into our own AI and technology platforms, and leaders who value integrity, collaboration, and results. Come build a career with purpose.