Information Systems Security Officer (ISSO)

Responsibilities

• Maintain the operational security posture of assigned information systems and ensure compliance with established security policies, standards, and procedures
• Support and manage the security aspects of systems through day-to-day security operations
• Plan, coordinate, implement, and enforce information systems security policies, standards, and methodologies
• Manage configuration changes to systems and assess the security impact of those changes
• Support Risk Management Framework (RMF) activities, including security authorization and accreditation efforts
• Prepare, review, and maintain security documentation including System Security Plans (SSPs), Risk Assessment Reports, Security Requirements Traceability Matrices (SRTMs), and authorization packages
• Conduct vulnerability and risk assessments and recommend appropriate mitigation strategies
• Evaluate security solutions to ensure compliance with requirements for processing classified information
• Support configuration management of security-related hardware, software, and firmware
• Collaborate with engineering and operational teams to resolve security findings and maintain compliance throughout the system lifecycle

Requirements

• Ten (10) years of experience as an Information Systems Security Officer (ISSO) supporting programs of similar scope, type, and complexity
• In At Least Two (2) Of The Following Current security tools: Hardware/software security implementation, Communication protocols, Encryption techniques and tools
• Experience supporting system security, change management, RMF, security authorization, and configuration management activities
• Bachelor's degree in Computer Science or a related discipline from an accredited college or university
• Four (4) additional years of ISSO experience may be substituted for a bachelor's degree
• DoD 8570/8140 IAM Level I (or higher) certification required
• US citizenship and an active TS/SCI with Polygraph security clearance required