Information Systems Security Officer

Saalex is seeking a Senior Information Systems Security Officer (ISSO) in Camarillo/Naval Air Station Point Mugu, CA to support cybersecurity, Risk Management Framework (RMF), and Certification & Accreditation (C&A) activities. The selected candidate will serve as a key cybersecurity resource responsible for supporting system authorization efforts, maintaining security compliance, implementing information assurance policies, and ensuring systems maintain Authority to Operate (ATO) status. This position requires a strong understanding of RMF, cybersecurity compliance, system accreditation, and DoD information assurance requirements.

Position Type: Full-Time

Salary: $145k - $180k annually (depending on experience)

Work Location: Onsite – NAS Point Mugu, CA

Essential Functions:

• Serve as the Sr. Information Systems Security Officer (ISSO) supporting Certification & Accreditation (C&A) activities for multiple systems and programs.
• Prepare, maintain, submit, and update RMF and accreditation documentation required to achieve and maintain system authorization.
• Support Authority to Operate (ATO) efforts and continuous monitoring activities throughout the system lifecycle.
• Ensure implementation of security policies, procedures, and controls established by the Information Systems Security Manager (ISSM).
• Maintain knowledge of current information assurance, cybersecurity, and RMF requirements, policies, directives, and emerging technologies.
• Assess information systems and operating environments to ensure compliance with applicable security requirements.
• Support security control implementation, assessment, remediation, and documentation activities.
• Assist with the development and maintenance of system security documentation, policies, procedures, and compliance artifacts.
• Conduct management studies and evaluations focused on cybersecurity compliance and procedural effectiveness.
• Develop division-level policies and procedures to ensure compliance with DoD and organizational cybersecurity requirements.
• Coordinate required cybersecurity activities, milestones, reviews, and compliance efforts to ensure timely execution.
• Provide cybersecurity guidance and recommendations to technical staff, management, and government stakeholders.
• Deliver security awareness and cybersecurity-related training to assigned personnel.
• Review technical documentation, contracts, reports, and program deliverables for security and compliance requirements.