Information Security Risk Specalist

Kavaliro is seeking an RMF Specialist/ISSO to support a client in Hawaii.You Have:3+ years of experience supporting RMF authorization activities, such as NIST SP 800-37 or SP 800-53, on DoD or IC information systemsExperience with continuous monitoring tooling such as ACAS, Nessus, SCAP, or STIG Viewer, and vulnerability remediation coordinationExperience with categorization methodology under FIPS 199 and NIST SP 800-60, and with impact-level determinations for classified or national security systems under CNSSI 1253Knowledge of eMASS, including package population, artifact management, POA&M tracking, and control inheritance or hybrid control managementAbility to read, interpret, and apply control assessment procedures and produce assessment-ready documentation without extensive reworkAbility to document security rationale clearly enough for AO or SCA review without additional translation by the ISSMTS/SCI clearanceHS diploma or GEDInformation Security Certification, including CEH, CISM, CCSP, CCSK, CISSP, or CompTIA Security+ CertificationNice If You Have:Experience with defense or national security-related issues in the Indo-Pacific regionExperience with NIST 800-53 and DoD 8500 or 8510Experience with selecting, designing, and implementing security tools and capabilities for large, complex federal or commercial organizationsExperience with Amazon Web Services (AWS), Azure, or Google Cloud Platform (GCP)Knowledge of the Enterprise Mission Assurance Support Service (eMASS)Knowledge of innovative cybersecurity capabilities, including AI and machine learning, Next-Generation Firewall (NGFW), and Big DataKnowledge of Mission Partner Engagement (MPE)Ability to assist in developing cybersecurity policies or governance frameworksPossession of excellent verbal and written communication skillsBachelor's degreeClearance:Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.