Information System Security Officer (ISSO) II

Position Overview

The ISSO is responsible for ensuring the appropriate operational security posture is maintained for an information system and works in close collaboration with the ISSM and ISO.

Key Responsibilities

• Work in close coordination with the ISSM and ISO in monitoring the information system(s) and its environment of operation to include developing and updating the authorization documentation, implementing configuration management across authorization boundaries.
• Avoid working on sensitive or classified information without proper clearance.
• Assist the ISSM in meeting their duties and responsibilities.
• Prepare, review, and update authorization packages.
• Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media.
• Notify ISSM when changes occur that might affect the authorization determination of the information system(s).
• Cover any anomalies in audit records and ensure they are collected, reviewed, and documented.
• Attend required technical and security training (e.g., operating system, networking, security management) relative to assigned duties.
• Execute the cyber security portion of the self-inspection, to include providing security coordination and review of all system assessment plans.
• Identify cyber security vulnerabilities and assist with the implementation of the countermeasures for them.
• Prepare reports on the status of security safeguards applied to computer systems.
• Perform ISSO duties in support of in-house and external customers.
• Conduct security impact analysis activities and provide to the ISSM on all configuration management changes to the authorization boundaries.

Qualifications

• Education: Bachelors degree and 2 years of experience or an Associates and 4 or 6 years with no degree.
• Experience: 2-5 years related experience, especially in developing RMF packages or bodies of evidence.
• SAP experience.
• Certifications: IAT Level 2 OR IAM Level 2.