Deployment Lead / Information System Security Officer (ISSO)

ASI Government provides government leaders with the expertise they need to navigate acquisition and organizational challenges so they can make an impact and achieve their goals. For over 30 years, ASI has transformed the way government does business, impacting over 70 government agencies across the civilian, defense, and intelligence communities.
Do you thrive on creating unique and impactful value for Federal clients? Are you passionate about partnering with clients and collaborating to create solutions? Do you enjoy the opportunity to drive change that impacts our nation?
We are looking for smart, curious, driven individuals to join us in partnering with our client to help them solve some of the nation’s most challenging problems. ASI Government serves as a trusted adviser to government leaders seeking improved performance, enhanced organization effectiveness, and strategic change.
ASI Government’s AI Practice is seeking a Deployment Lead / Information System Security Officer (ISSO) to own everything between a finished build and a live, authorized system at Naval Supply Systems Command (NAVSUP). This is a full-time, 100% NAVSUP-dedicated role and ASI’s anchor presence on the account. You will lead every AI Practice deployment into the NAVSUP environment and serve as ISSO for those systems, carrying them through the Department of War (DoW) Risk Management Framework (RMF) to an Authority to Operate (ATO) and keeping them authorized through continuous monitoring. You will partner with ASI’s NAVSUP account lead and off-site development team, work closely with NAVSUP IT, cybersecurity and badging staff, and operate under the direction of the government Information System Security Manager (ISSM).
Key Responsibilities:
Deployment Leadership
Lead every AI Practice deployment at NAVSUP, from intake through go-live, following the PAIRD Deployment Guide.
Run the development kickoff for each new use case with NAVSUP IT, cybersecurity and badging staff, defining screening and ATO requirements before work begins.
Receive builds from ASI’s off-site development team and own their integration, testing in the NAVSUP environment, and production release.
Serve as the day-to-day technical point of contact for NAVSUP stakeholders and the ASI account lead.
Coordinate site access and badging for ASI staff assigned to NAVSUP, and maintain a current record of badged and in-process personnel.
Report deployment status, risks and blockers to ASI leadership.
Information System Security Officer (ISSO)
Carry ASI’s systems at NAVSUP through the DoW Risk Management Framework (DoDI 8510.01), applying NIST SP 800-37 and the NIST SP 800-53 security controls.
Prepare and maintain authorization packages, including system security plans, control implementation statements, assessment evidence and supporting documentation.
Develop and track Plans of Action and Milestones (POA&Ms) for known vulnerabilities through closure.
Run continuous monitoring after authorization, including vulnerability scans, configuration compliance checks, patch status and periodic control reviews.
Work under the direction of the government ISSM and provide accurate, timely security status to support the Authorizing Official’s decisions.
Review planned changes to deployed systems for security impact before release.
Lead ASI’s response to security incidents on NAVSUP systems and report them through NAVSUP’s established channels.
Required:
5+ years of cybersecurity experience, including 3+ years as an ISSO or in a comparable security role on DoW systems under the Risk Management Framework, with hands-on experience building authorization packages and managing POA&Ms.
Demonstrated experience leading software deployments into a government environment, from test through production release.
Qualified, or able to qualify, under DoD Manual 8140.03 for the cyber work role assigned to this position: foundational qualification through certification, education, or DoW training and experience; on-the-job resident qualification at the site; and 20 hours of continuing professional development annually.
Eligible to obtain and maintain a NAVSUP badge and the security clearance level required by the account. U.S. citizenship required.
Clear written and verbal communication with government security staff, engineers and program leadership.
Preferred:
A security certification commonly accepted for DoW security management roles, such as CISSP, CISM or CompTIA SecurityX (formerly CASP+).
An active NAVSUP badge or prior NAVSUP site access.
Hands-on experience with eMASS, ACAS/Tenable, and DISA STIG and SCAP compliance tools.
Experience deploying cloud-hosted applications, data pipelines or AI/ML models, and applying security controls to them.
Familiarity with Navy supply chain, acquisition or contracting systems.
Experience working on a team where developers and deployers are on different sites or accounts.
Bachelor’s degree in cybersecurity, information technology, computer science or a related field.
Why Join ASI Government?