Information System Security Specialist III (ISSO)

NANA Regional Corporation - Suffolk, VA

Full-time - Mid Level

Onsite - Suffolk, VA

Securities, Commodity Contracts, and Other Financial Investments and Related Activities

About the position

The Information System Security Specialist III (ISSO) is responsible for managing and securing information systems, ensuring compliance with cybersecurity standards and risk management frameworks. This full-time hybrid role allows for teleworking options and requires a minimum of 5 years of experience in cybersecurity, engineering, or related fields. The ideal candidate will have expertise in RMF packages, risk mitigation strategies, and STIG scanning, along with an active SECRET clearance.

Responsibilities

• Oversee the implementation and maintenance of security controls and procedures to ensure compliance with the Risk Management Framework (RMF).
• Develop and maintain RMF packages, writing risk acceptance and mitigation strategies to address identified vulnerabilities.
• Perform STIG scanning and analysis to identify system weaknesses and ensure corrective actions are taken.
• Work with Information Assurance (IA) tools to assess system security and maintain compliance with DoD and Navy cybersecurity standards.
• Collaborate with cross-functional teams to develop and implement risk management strategies for secure systems.
• Provide technical expertise in securing VoIP, CISCO networking, and Avaya systems (preferred).
• Ensure continuous monitoring of information systems and develop reports for risk management and security posture updates.

Requirements

• Associate's degree with 5 years of relevant experience, or a High School Diploma with 7 years of experience in cybersecurity, engineering, T&E, or A&A (formerly C&A).
• IAT II certification required (e.g., Security+).
• Minimum of 5 years of experience in a cybersecurity or related field.
• Familiarity with Information Assurance (IA) tools and processes.
• Experience with RMF packages and writing risk acceptance and mitigation strategies.
• Proficiency with STIG scanning tools and techniques.
• Active SECRET clearance is required.
• Strong analytical, problem-solving, and communication skills.

Nice-to-haves

• Experience with VoIP, CISCO networking, and Avaya systems.