Information System Security Officer

Job Description

Job Description

Benefits:

• 401(k)
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance

Senior Information System Security Officer (Senior ISSO)

Employer: Magnus Management Group

Department: Federal Government Program

Location: Honolulu, HI

Clearance: None

Telecommute: Onsite

Position Type: Fulltime

Position Overview

The Senior Information System Security Officer (Senior ISSO) provides expert level cybersecurity leadership supporting a federal government program within the Pacific Region Headquarters. This role ensures the confidentiality, integrity, and availability of federal information systems by leading security governance, advising senior leadership, and overseeing compliance with federal cybersecurity requirements.

The Senior ISSO serves as a technical authority , guiding system owners, administrators, and program leadership through the implementation of NISTaligned security controls, risk management processes, and enterprise security strategies across missioncritical federal systems.

Senior Level Responsibilities

Cybersecurity Leadership & Governance

• Serve as the primary cybersecurity advisor to federal program leadership, system owners, and technical teams on all matters related to IT security, risk, and compliance.
• Lead the development, implementation, and continuous improvement of the programs cybersecurity posture in alignment with federal directives and policies.
• Oversee the application of NIST SP 800series guidance, FIPS requirements, and federal IT security standards across all assigned systems.
• Direct the creation, review, and maintenance of security policies, procedures, standards, and governance documentation .

Risk Management & Compliance

• Lead the execution of the Risk Management Framework (RMF) lifecycle, including categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
• Develop and maintain system security plans (SSPs) , POA&Ms , security assessment reports , and other RMF artifacts.
• Conduct seniorlevel risk analyses, recommending mitigation strategies and presenting risk decisions to Authorizing Officials and senior stakeholders.
• Ensure compliance with federal IT security baseline policies and all applicable federal cybersecurity requirements.

Technical Security Expertise

• Provide expert guidance on the implementation and monitoring of security controls across Windows, Linux, and hybrid enterprise environments.
• Oversee the use of enterprise security tools such as Cybersecurity Asset Management , Tenable Security Center , and other vulnerability, configuration, and compliance platforms.
• Lead the development and validation of contingency plans , backup strategies , and disaster recovery procedures , ensuring alignment with NIST SP 80034 and related guidance.
• Provide seniorlevel expertise in encryption technologies , secure configurations, and data protection best practices.

Security Operations & Continuous Monitoring

• Direct vulnerability management activities, ensuring timely remediation and reporting of findings.
• Lead incident response coordination with federal cybersecurity teams, providing expert analysis and documentation.
• Oversee continuous monitoring activities, dashboards, and reporting to ensure ongoing compliance and operational readiness.

Documentation, Reporting & Executive Communication

• Develop highquality white papers , technical briefs, and decision documents for senior leadership.
• Present complex cybersecurity issues and recommendations to executives, system owners, and crossagency partners.
• Lead security reviews, audits, and assessments, ensuring accurate and complete documentation.

Collaboration & Stakeholder Engagement

• Coordinate with federal CIO offices, cybersecurity leadership, system owners, network administrators, and external partners to ensure a unified security posture.
• Mentor junior ISSOs, analysts, and technical staff, providing guidance on federal cybersecurity practices and NIST frameworks.
• Represent the Pacific Region program in enterpriselevel cybersecurity working groups and governance boards.

Required Technical Skills

• Expert knowledge of US Federal IT security policies , implementation standards, and NIST SP 800series and FIPS requirements.
• Advanced proficiency applying IT security concepts, methodologies, and tools, including vulnerability management, asset management, and enterprise security platforms.
• Deep experience with enterprise architecture and security engineering principles.
• Seniorlevel expertise in contingency planning, continuity of operations, and disaster recovery aligned with NIST guidance.
• Comprehensive understanding of encryption technologies, secure data handling, and cryptographic best practices.
• Demonstrated mastery of IT security tools, applications, and implementation techniques across diverse federal environments.

Required Experience

Experience must include federal government projects/contracts involving:

• Minimum of 10 years of progressive experience in federal cybersecurity, information assurance, or IT security operations, including direct support to federal programs and execution of NISTbased security frameworks.
• Leading the development of IT security requirement solutions , including authoring white papers, technical analyses, and executivelevel documentation.
• Directing the creation of solution migration strategies , implementation plans, and security engineering roadmaps.
• Developing, implementing, and governing IT security policies, procedures, and standards across enterprise environments.
• Serving as a senior advisor to leadership on cybersecurity risk, compliance, and system authorization activities.
• Managing RMF activities for complex or highimpact federal systems.

Required Certifications

At least one senior level certification must be included:

• CompTIA A+, Network+, Security+
• GCIH, GSE, GISP, GSLC
• ISC2 CAP, SSCP, CISSP
• CISA, CRISC
• SCNP, SCNA