[Hiring] Information Systems Security Officer @Chenega MIOS

Role Description

The Information Systems Security Officer (ISSO) is responsible for overseeing, implementing, and maintaining cybersecurity compliance and security controls for designated Operational Technology (OT), Non-Appropriated Fund (NAF), and traditional Information Technology (IT) systems in support of the Installation Management Command (IMCOM) under the Army Materiel Command (AMC).

• Serve as the primary ISSO supporting assigned information systems throughout the full system development lifecycle.
• Implement, assess, and maintain security controls in accordance with appropriate NIST based on technology, DoD cybersecurity policies, and applicable regulatory requirements.
• Support cybersecurity lifecycle management for Facility-Related Control Systems (FRCS), Industrial Control Systems (ICS), Supervisory Control and Data Acquisition (SCADA) systems, and building automation architectures unique to IMCOM installations.
• Support and maintain ATO packages, including system categorization, control implementation, assessment coordination, and continuous monitoring activities.
• Apply specialized risk management criteria for OT systems, balancing traditional confidentiality requirements with critical availability and safety requirements inherent to physical infrastructure.
• Ensure security compliance for IMCOM NAF systems (including Morale, Welfare, and Recreation [MWR] and lodging environments), aligning RMF controls with applicable payment card industry standards (PCI-DSS) and financial protection regulations.
• Develop, review, and maintain system security documentation such as SSPs, POA&Ms, SARs, RARs, and CONMON artifacts.
• Ensure compliance with DoD cybersecurity requirements, STIGs, FISMA, and data protection regulations.
• Coordinate and support internal and external audits, inspections, and information assurance readiness reviews.
• Review IT policies, procedures, and technical documentation to ensure alignment with regulatory and organizational requirements.
• Identify compliance gaps, assess risk, and recommend corrective actions or compensating controls.
• Maintain awareness of evolving cybersecurity threats, vulnerabilities, and regulatory changes to ensure ongoing compliance.
• Provide cybersecurity risk and compliance briefings to program leadership, system owners, and executive stakeholders.
• Identify, assess, and document cybersecurity risks and support the development of risk mitigation strategies.
• Support the implementation of a structured IT risk management and governance framework.
• Assist with development and enforcement of cybersecurity policies and procedures.
• Serve as a cybersecurity liaison between technical teams, compliance staff, auditors, and government customers.
• Conduct briefings and presentations on cybersecurity posture, compliance status, and non-compliance issues.
• Other duties as assigned.

Qualifications

• Bachelor's degree in Science, Technology, Engineering, Mathematics, IT, or business-related programs.
• 6+ years of experience in cybersecurity, including experience with traditional IT and exposure to/experience with Operational Technology (OT) or Facility-Related Control Systems (FRCS).
• 5+ years of experience with RMF, ATO packages, POA&M development, system categorization is required.
• 3+ years’ experience supporting DoD or federal programs is highly desirable.
• Must have active CompTIA Security+ certification in accordance with DoD 8570/8140 requirements.
• Must have active Secret clearance with ability to obtain TS with SCI eligibility.
• Successfully pass background and drug screening.

Requirements

• Cybersecurity certifications like CISSP, CISA, or CISM, or CGRC is preferred.
• Additional certifications in OT/ICS security or financial security are highly desirable.
• Prior experience supporting Army Installation Management Command (IMCOM) systems or municipal/base-level utility infrastructure is highly preferred.

Benefits

• Opportunities for professional development and skill sharpening.
• Well-being programs and a positive, supportive culture.
• Flexibility to make daily choices that promote health and well-being.
• Focus on education, giving, skill-based volunteerism, and leadership to drive positive social impact.