Information System Security Officer (ISSO)

• DAFFM Chameleon Integrated Services life insurance, 401(k) Jul 31, 2026 We are a growing information technology company that offers its employees a culture of success, the chance to work on revolutionary federal IT infrastructure, and the opportunity to grow alongside cutting-edge technology that is reshaping the industry.

We are seeking forward thinking candidates that have strong experience in operational support and can help take to the next level in a pro-active stance. Chameleon Integrated Services has expertise in operations management, quality systems, data operations and cybersecurity. We secure some of the most sensitive data for the Department of Defense and for other U. S. federal government agencies. We are known for the great care we take with clients and employees, and we believe in promoting from within. We offer a Full Benefits package including: Competitive Employee Health Insurance options including dental 100% company paid vision plan 401K plan with generous company match and no vesting period 100% company paid Life insurance 100% company paid long and short-term disability insurance Training allowance PTO and more

INFORMATION SYSTEM SECURITY OFFICER

Position mission: Maintain the security posture, RMF records, and continuous-monitoring evidence for assigned systems within the

DAF FM AO

boundary.

Duties:

Maintain assigned-system RMF and authorization artifacts. Update SSPs, control implementation statements, POA&Ms, risk records, and supporting evidence. Maintain assigned-system information in eMASS and ITIPS. Monitor control implementation and authorization status. Track vulnerabilities, remediation actions, due dates, closure evidence, and residual risks. Coordinate with system administrators, database administrators, software engineers, program personnel, and system owners. Support security-control assessments and respond to findings. Prepare system-level inputs for AO decision staff packages. Support continuous monitoring and reauthorization activities. Analyze proposed changes for security implications and coordinate required artifact updates. Participate in briefings and governance sessions concerning assigned systems. Maintain current system boundary, inventory, points of contact, authorization, and expiration information.

MANDATORY SECURITY COMPLIANCE

(DoD 8570 / DoD 8140) To be eligible for technical review and corporate submittal to the Air Force Contracting Officer, candidates MUST meet the requirements of OPTION A or

OPTION B

below. Applications failing to demonstrate at least one pathway will be automatically archived.

OPTION A

(8570): Candidate must hold ONE active, verifiable commercial certification from the approved DoD 8570/8140 IAM Level II list below. Please include your certification number and expiration date directly on your resume draft: CGRC

• Certified in Governance, Risk and Compliance (formerly CAP)

CASP+ CE

• CompTIA Advanced Security Practitioner CISM
• Certified Information Security Manager CISSP (or Associate)
• Certified Information Systems Security Professional GSLC
• GIAC Security Leadership Certification CCISO
• Certified Chief Information Security Officer

OR OPTION B

(8140): Candidate must hold a relevant higher-education degree (Master's or Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, or Information Technology) AND demonstrate clear, hands-on professional experience supporting Risk Management Framework (RMF) activities, updating control implementation records, or maintaining vulnerability tracking logs within structured environments.

Requirements:

Personally maintained RMF packages for one or more systems. Hands-on eMASS and ITIPS use. SSP, POA&M, assessment-evidence, risk-record, and continuous-monitoring duties. Vulnerability and remediation coordination with technical teams. Support for ATO or reauthorization activities. Security-impact analysis for system or configuration changes. Interaction with system owners, program managers, assessors, and authorization personnel. The candidate must demonstrate system-level security ownership and recurring coordination with technical personnel.

Anticipated start:

September 28, 2026 Primary work location: Ellsworth AFB, South Dakota. Occasional work at Wright-Patterson AFB, Ohio.

Work schedule:

An eight-hour shift scheduled between 6:00 a.m. and 6:00 p.m. Mountain Time, Monday through Friday. The team must collectively provide overlapping coverage during that window. COOP support may be required, but work will remain within a 40-hour workweek unless the Contracting Officer authorizes otherwise.

Project Length:

Up to 4.5 years "We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status" Texting Privacy Policy Message type: Informational; you will receive text messages regarding your application and potentially regarding interview scheduling. No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Message frequency will vary depending on the application process.

Msg & data rates may apply. OPT out at any time by texting "Stop".