Information System Security Officer

About the role

The Information System Security Officer (ISSO) position is a Department of Defense (DoD) requirement responsible for the cybersecurity, compliance, and risk management of classified information systems in support of AEDC operations.

Responsibilities

• Assists the Information System Security Manager (ISSM) in developing a cyber security program with coworkers and users of information systems
• Ensures compliance with government and company security policies
• Conducts routine audits of approved computer systems
• Develops, implements, and maintains System Security Plans (SSPs) and Security Control Traceability Matrices (SCTMs) to acquire and maintain system accreditations and approvals
• Performs comprehensive risk assessment reviews and develops Plans of Action & Milestones (POAMs) to correct deficiencies and mitigate identified risks
• Conducts continuous monitoring activities, including Nessus vulnerability scans, DISA STIG scans using the SCAP tool, and group policy analysis to ensure system integrity
• Performs routine updates on computer systems to include software updates, AV updates, and system hardening
• Assists ISSM in developing and implementing training to the system users
• Attends workshops, conferences, and trainings to maintain proficiency
• Observes company Quality, Safety, Environmental, Security, and Administrative policies; supports Process Improvement

Requirements

• Associate’s degree in information assurance, Computer Information Security or related discipline
• Minimum of 4 years of information assurance, IT, or security experience
• In lieu of degree, an equivalent combination of formal/technical/military training and a minimum of 6 years directly related experience
• Must be able to obtain DOD 8140/8570 IAM Level I baseline certification (Security +) within 6 months
• Current United States Citizenship required
• Must be able to obtain and maintain a Top-Secret security clearance and meet requirements for access to the AEDC local area network

Qualifications

• Experience with Operational Security (OPSEC) and Communications Security (COMSEC)
• Experience with NESSUS and SCAP software
• Prior System Administration experience on Windows
• Knowledge of the Joint Special Access Program (SAP) Implementation Guide (JSIG), NIST publications, and the DoD Risk Management Framework (RMF)
• Strong working knowledge of computer systems, system software, computer peripherals, and operating systems

Skills

Not specified

Benefits

Not specified

Pay

$78,000 - $107,000 / year at location New Mexico: White Sands Missile Range, NM

Schedule

Not specified