Information Systems Security Officer

Summary

Information Systems Security Officer

Huntsville, AL

Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employer’s core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level! 

The Information Systems Security Officer (ISSO) is responsible for overseeing, implementing, and maintaining cybersecurity compliance and security controls for designated Operational Technology (OT), Non-Appropriated Fund (NAF), and traditional Information Technology (IT) systems in support of the Installation Management Command (IMCOM) under the Army Materiel Command (AMC). 

Responsibilities

• Serve as the primary ISSO supporting assigned information systems throughout the full system development lifecycle. 
• Implement, assess, and maintain security controls in accordance with appropriate NIST based on technology, DoD cybersecurity policies, and applicable regulatory requirements. 
• Support cybersecurity lifecycle management for Facility-Related Control Systems (FRCS), Industrial Control Systems (ICS), Supervisory Control and Data Acquisition (SCADA) systems, and building automation architectures unique to IMCOM installations 
• Support and maintain ATO packages, including system categorization, control implementation, assessment coordination, and continuous monitoring activities. 
• Apply specialized risk management criteria for OT systems, balancing traditional confidentiality requirements with critical availability and safety requirements inherent to physical infrastructure. 
• Ensure security compliance for IMCOM NAF systems (including Morale, Welfare, and Recreation [MWR] and lodging environments), aligning RMF controls with applicable payment card industry standards (PCI-DSS) and financial protection regulations. 
• Develop, review, and maintain system security documentation such as SSPs, POA&Ms, SARs, RARs, and CONMON artifacts. 
• Ensure compliance with DoD cybersecurity requirements, STIGs, FISMA, and data protection regulations. 
• Coordinate and support internal and external audits, inspections, and information assurance readiness reviews. 
• Review IT policies, procedures, and technical documentation to ensure alignment with regulatory and organizational requirements. 
• Identify compliance gaps, assess risk, and recommend corrective actions or compensating controls. 
• Maintain awareness of evolving cybersecurity threats, vulnerabilities, and regulatory changes to ensure ongoing compliance. 
• Provide cybersecurity risk and compliance briefings to program leadership, system owners, and executive stakeholders. 
• Identify, assess, and document cybersecurity risks and support the development of risk mitigation strategies. 
• Support the implementation of a structured IT risk management and governance framework. 
• Assist with development and enforcement of cybersecurity policies and procedures. 
• Serve as a cybersecurity liaison between technical teams, compliance staff, auditors, and government customers. 
• Conduct briefings and presentations on cybersecurity posture, compliance status, and non-compliance issues. 
• Other duties as assigned. 

Qualifications

• Bachelor's degree in Science, Technology, Engineering, Mathematics, IT, or business-related programs  
• 6+ years of experience in cybersecurity, including experience with traditional IT and exposure to/experience with Operational Technology (OT) or Facility-Related Control Systems (FRCS) 
• 5+ years of experience with RMF, ATO packages, POA&M development, system categorization is required 
• 3+ years’ experience supporting DoD or federal programs is highly desirable 
• Must have active CompTIA Security+ certification in accordance with DoD 8570/8140 requirements. 
• Must have active Secret clearance with ability to obtain TS with SCI eligibility. 
• Successfully pass background and drug screening.

Preferred Qualifications:

• Cybersecurity certifications like CISSP (Certified Information Systems Security Professional), CISA (Certified Information Systems Auditor), or CISM (Certified Information Security Manager), or CGRC (Certified in Governance, Risk and Compliance), is preferred 
• Additional certifications in OT/ICS security (e.g., SANS GICSP - Global Industrial Cyber Security Professional) or financial security (e.g., PCI-DSS ISA/QSA) are highly desirable. 
• Prior experience supporting Army Installation Management Command (IMCOM) systems or municipal/base-level utility infrastructure is highly preferred. 

Knowledge, Skills and Abilities:

• Deep understanding of cybersecurity frameworks, risk management, and compliance requirements. 
• Strong knowledge of cloud and hybrid environments (AWS, Azure, GCP, Oracle) 
• Experience with eMASS and/or Xacta is required. 
• Experience with FISMA and security control assessments required. 
• Experience working in Unix/Linux environment. 
• Experience working in cloud infrastructures. 
• Must have high proficiency in the Microsoft Office suite and possess advanced skills and knowledge in programs like Word, Excel, PowerPoint, and Outlook. 
• Experience extracting, transforming, and structuring data to support both exploratory analytics and operational reporting. 
• Familiarity with Unified Facilities Criteria (UFC) 4-010-06 (Cybersecurity of Facility-Related Control Systems) and NIST SP 800-82 (Guide to Industrial Control Systems Security). 
• Strong creative and visual storytelling skills with an eye for design, usability, and user experience. 
• Strong pedagogical, public speaking, and coaching skills with the ability to explain complex cyber-compliance and RMF concepts to technical and non-technical learners alike. 
• Understanding of PCI-DSS compliance, credit/debit transaction security, and civilian commercial-off-the-shelf (COTS) networks utilized in NAF/MWR facilities. 
• Use expert knowledge of data visualization tools to deliver information that allows client users to quickly understand data, ask better questions, and take action. 
• Possess knowledge and experience with data analysis and data technical expertise in data management, engineering, and science. 
• Skillful time management and organizational skills to set and meet deadlines. 
• Ability to work both independently and within a team. 
• Ability to work effectively in a team environment to encourage collaboration, innovation, and continuous improvement. 
• Ability to meet minimum clearance requirements. 
• Ability to work nights, weekends, and holidays as required. 
• Ability to travel up to 25%. 

How you’ll grow 

At Chenega MIOS, our professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe there’s always room to learn. 

We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers. 

Benefits 

At Chenega MIOS, we know that great people make a great organization. We value our team members and offer them a broad range of benefits. 

Learn more about what working at Chenega MIOS can mean for you. 

Chenega MIOS’s culture 

Our positive and supportive culture encourages our team members to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them be healthy, centered, confident, and aware. We offer well-being programs and continuously look for new ways to maintain a culture where we excel and lead healthy, happy lives. 

Corporate citizenship 

Chenega MIOS is led by a purpose to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our team members, and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities. 

Learn more about Chenega’s impact on the world. 

Chenega MIOS News- https://chenegamios.com/news/

Tips from your Talent Acquisition Team 

We want job seekers exploring opportunities at Chenega MIOS to feel prepared and confident. To help you with your research, we suggest you review the following links: 

Chenega MIOS web site - www.chenegamios.com

Glassdoor - https://www.glassdoor.com/Overview/Working-at-Chenega-MIOS-EI_IE369514.11,23.htm

LinkedIn - https://www.linkedin.com/company/1472684/

Facebook - https://www.facebook.com/chenegamios/

#Chronos Operations, LLC