Information System Security Officer (ISSO)

Responsibilities

• Ensure all systems and applications meet DoD and Air Force cybersecurity requirements as directed by the Information System Security Manager (ISSM).
• Protect the confidentiality, integrity, and availability of systems, networks, and data by developing, implementing, and maintaining cybersecurity programs, policies, procedures, and security tools.
• Support all Risk Management Framework (RMF) authorization and accreditation activities, including configuration, artifact creation, documentation, and compliance reviews.
• Assist the ISSM in performing risk and vulnerability assessments on planned and operational information systems, identifying security gaps and recommending mitigation actions.
• Conduct security evaluations, audits, and reviews; support development of system contingency and disaster recovery plans; and promote user compliance with cybersecurity policies and training requirements.
• Participate in system and network design efforts to ensure appropriate security controls and RMF activities are incorporated from the start.
• Assist in the collection, analysis, and preservation of digital evidence related to cybersecurity incidents or policy violations.
• Maintain the operational security posture of assigned IT systems, monitor situational awareness, and implement actions to improve or restore cybersecurity resilience.
• Enforce Air Force cybersecurity policies, procedures, configuration guidelines (e.g., STIGs/SRGs), and change management processes.
• Maintain and audit authorized user access documentation and ensure users meet clearance, need-to-know, and annual training requirements.
• Report security incidents or vulnerabilities to the ISSM and support implementation of corrective or protective measures.
• Initiate and track exceptions, deviations, or waivers to cybersecurity requirements as needed.

Requirements

• Must be a U.S Citizen
• Clearance: Must have and be able to maintain an Active Secret Clearance.
• Education: Bachelor’s or Master’s Degree in a related field and at least 3 years of experience discipline being performed, 3 of which must be in the DoD, OR 7 years of directly related experience, 5 of which must be in the DoD.
• Certifications: IAT Level II (Security+, GSEC, CCNA-Security, Certified Systems Security Professional (CISSP), or equivalent certification)
• Technical Skills: Experience supporting Risk Management Framework (RMF) activities and cybersecurity compliance; Experience using eMASS for authorization packages, artifact management, and accreditation support; Vulnerability assessment and risk mitigation analysis; STIG/SRG implementation and configuration management; Security audits, assessments, and incident response support; Information system security and operational security posture management; Secure system and network design support in DoD environments; Interpersonal Skills: Ability to develop innovative approaches to complex test problems; Strong attention to quality, adequacy, and completeness of test results and conclusions; Ability to deliver thorough, timely, and efficient task execution; Ability to provide clear analysis and recommendations to program test leadership.