Cybersecurity Information System Security Officer (ISSO)

Cybersecurity Information System Security Officer (ISSO)

Nakupuna Prime is seeking a Cybersecurity Information System Security Officer (ISSO) to support the U.S. Army Combat Capabilities Development Command (DEVCOM) Artificial Intelligence Integration Center (AI2C).

Responsibilities

The following reflects management's definition of essential functions for this job but does not restrict the tasks that may be assigned. Management may assign additional duties and responsibilities to this job at any time due to reasonable accommodation or other reasons. Specific duties include:

• Serve as the ISSO for assigned DoD information systems, including cloud-based applications
• Support Risk Management Framework (RMF) activities using Enterprise Mission Assurance Support Service (eMASS)
• Maintain and update RMF documentation, including System Security Plans (SSPs), POA&Ms, Security Assessment Reports (SARs), and supporting artifacts
• Support governance, risk, and compliance (GRC) efforts to ensure systems meet DoD and Army cybersecurity requirements
• Execute comprehensive risk assessments, including control validation, vulnerability analysis, and risk impact evaluations
• Track and manage security control implementation and remediation activities
• Prepare executive-level cybersecurity reports and briefings outlining system posture, risk status, compliance metrics, and remediation progress
• Maintain cross-organizational communications with major Army entities, including Authorizing Officials (AOs), Security Control Assessors (SCAs), ISSMs, system owners, and program leadership
• Support cloud application security compliance efforts in accordance with DoD cloud security policies and FedRAMP requirements (as applicable)
• Assist with continuous monitoring activities and ensure findings are documented and resolved in accordance with established timelines
• Provide cybersecurity guidance to technical and operational teams to ensure secure system configurations and operations

Qualifications

Skills/Qualifications: The candidate must be self-motivated, customer-focused, and capable of working in a fast-paced Department of Defense (DoD) environment.

• Minimum of 2 years of experience serving as an Information System Security Officer (ISSO) within a DoD environment
• Demonstrated experience using eMASS to support RMF activities
• Experience supporting cloud applications within a DoD environment
• Experience supporting governance, risk, and compliance (GRC) activities
• Experience executing comprehensive risk assessments
• Experience preparing executive-level cybersecurity reports
• Experience maintaining cross-organizational communications with major Army entities
• Hands-on, practical cybersecurity experience preferred

Education/Experience:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related technical discipline (or equivalent experience)
• Experience supporting users in a DoD or Federal Government environment preferred

Certifications Requirements:

• Cloud-related Certs preferred

Clearance Requirements: Must be a U.S. Citizen. Must possess and maintain an active Secret security clearance. Must be eligible for access to SIPRNet as required.

Work Location: Pittsburgh, Pennsylvania. On-site support required.

Physical Requirements:

The ideal candidate must, at a minimum, be able to meet the following physical requirements of the job with or without a reasonable accommodation:

• Ability to sit for prolonged periods at a desk working on a computer
• Ability to perform repetitive motions with hands, wrists, and fingers
• Ability to lift and carry IT equipment up to 40 pounds
• Ability to move between buildings and offices to provide onsite support
• Ability to engage in and follow audible communications in emergency situations