Information System Security Officer (ISSO) *

Job Description

The Information Systems Security Officer (ISSO) works closely with the Information Systems Security Manager (ISSM) to propose, coordinate, implement, and enforce information system security policies, standards, and methodologies. This includes implementing security configurations for operating systems and network devices in accordance with approved Security Technical Implementation Guides (STIGs). The ISSO collaborates with team members to define and implement cybersecurity requirements for managed systems and software, conducts security assessments of Risk Management Framework (RMF) controls, identifies corrective actions and mitigation strategies to achieve and sustain RMF compliance, and performs vulnerability assessments using ACAS, STIG, and SCAP.

• Perform security control continuous monitoring, security audits, risk analysis, and develop mitigation strategies for DoD information systems.

Essential Job Responsibilities

• Assist with A&A of all hosted computing environments.
• Perform cybersecurity site audits to verify architecture analysis, cybersecurity requirements, and controls, verify mitigation actions, witness cybersecurity testing and evaluation, and assist the ISSM with the final approval for ATO and/or ATC.
• Interface with end users to discuss IT, data management, and collaboration tools understanding and benefits.
• Ensure software, hardware, and firmware comply with appropriate security configuration guidelines.
• Coordinate changes or modifications with the ISSM and SCAR/SCA.
• Initiate protective or corrective measures, in coordination with the ISSM.
• Report security incidents or vulnerabilities to the ISSM.

Minimum Qualifications

• 2 years relevant experience with Bachelors in related field; 0 years experience with Masters in related field; or High School Diploma or equivalent and 6 years relevant experience.
• Experience planning and implementing network layouts of varying classifications in SCIF/SAPF spaces.
• Ability to coordinate and plan IT requirements across several Enterprise, MAJCOM, and agency partners.
• Familiarity with ICD/ICS 705 Standards as they pertain to networks.
• DoD 8570 (Sec+ or applicable) IAT level II cert required.
• Active TS/SCI clearance with ability to gain SAP/SAR.

Preferred Requirements

• Experience working as a COMSEC responsible Officer or familiarity handling and safeguarding COMSEC.

Physical Requirements

• May require working in an office or laboratory environment.
• Capable of climbing ladders and tolerating confined spaces and extreme temperature variances.