Information Assurance III Information System Security Officer (ISSO)

About the role

DLS Engineering is seeking an Information Assurance III (ISSO) professional for a full-time position in support of the Air Force Intranet Control (AFINC) program at Gunter Annex in Montgomery, Alabama. This is an on-site position.

Responsibilities

• Perform security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standards.
• Implement the Assessment and Authorization (A&A) processes under the Risk Managed Framework (RMF) for new and existing information systems.
• Maintain a current authorization to operate (ATO), and approval to connect (ATC) (if required), and in implementing corrective actions identified in the plan of action and milestones.
• Facilitate development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA) and Risk Acceptance Letters.
• Develop an Information System Continuous Monitoring (ISCM) strategy and monitor any proposed or actual changes to the system and its environment to maintain compliance.
• Audit systems to ensure security posture integrity.
• Conduct assessments and test/analysis data to document state of compliance with security requirements.
• Conduct risk assessments and investigations, recommend implementation of risk mitigations, and coordinate incident response activities.
• Supervise the development and deployment of program information security for all program systems to meet the program and enterprise requirements, policies, standards, guidelines and procedures.
• Register, maintain, verify, submit exceptions, conduct annual review, or decommission systems ports, protocols, and services (PPS) as necessary to ensure compliance with the DoD PPS Category Assurance List (CAL) and DoD PPS Vulnerability Assessment reports.

Requirements

• 5+ years experience in a cyber security or information assurance role including at least 3 years supporting the RMF.
• Must be CISM or CISSP certified (or hold an equivalent certification in compliance with DoD 8140/8570 IAM II).
• Must hold the Certified in Governance, Risk and Compliance (CGRC) certification and have participated in training for DISA ACAS Supervisor and Operator and DISA Enterprise Mission Assurance Support Service (eMASS).
• Must be a US citizen.
• Must hold a current Top Secret clearance with SCI Access (TS/SCI) or an active Secret clearance.

Qualifications

• Must be able to pass a government background check, which will be completed before employment.

Skills

• Knowledge of RMF and A&A processes.
• Experience with ISCM strategies and monitoring.
• Ability to conduct security audits and risk assessments.
• Strong understanding of cybersecurity principles and practices.
• Experience with DISA ACAS Supervisor and Operator and eMASS.

Benefits

• Competitive salary.
• 401(k) program with company match.
• Comprehensive benefits package including health, vision, dental, life, and disability insurance.
• Generous paid time off package.

Pay

The Pay Range For This Role Is 109,000 - 112,000 USD per year(Montgomery, AL)