Information Systems Security Officer (ISSO) – Skill Level 2

About the role

The Information Systems Security Officer (ISSO) will support the information assurance program by proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies.

Responsibilities

• Support senior Information Systems Security Officers and the Information System Security Manager in implementing, proposing, coordinating, enforcing, and ensuring compliance with information systems security policies, standards, and methodologies.
• Maintain the operational security posture of systems or programs, and obtain system authorization for information systems under assigned purview.
• Develop, maintain, update, and review System Security Plans and other Cybersecurity documentation, including documentation required for security authorization in accordance with ODNI and DoD policies.
• Evaluate and assist in the evaluation of security solutions to ensure they meet security requirements for processing classified information and support security authorization activities.
• Provide configuration management for security-relevant information system software, hardware, and firmware, manage and control system changes, assess the security impact of those changes, and maintain records for workstations, servers, routers, firewalls, intelligent hubs, network switches, and system upgrades.
• Plan and coordinate the implementation of information technology security programs and policies, track and ensure appropriate user identification and authentication mechanisms for information systems, and ensure ongoing compliance with system security policy.
• Provide daily oversight and direction to contractor Information Systems Security Officers and interact with customers, information technology staff, and high-level corporate officers to define and achieve required Cybersecurity objectives.

Requirements

• Ability to support a program, organization, system, or enclave’s information assurance program by supporting senior Information Systems Security Officers and the Information System Security Manager in implementing, proposing, coordinating, enforcing, and ensuring compliance with information systems security policies, standards, and methodologies, while maintaining the appropriate operational Cybersecurity posture.
• Ability to assist with and perform the management of security aspects of information systems, including performing day-to-day security operations, maintaining the operational security posture of systems or programs, and obtaining system authorization for information systems under assigned purview.
• Ability to develop, maintain, update, and review System Security Plans and other Cybersecurity documentation, including documentation required for security authorization in accordance with ODNI and DoD policies.
• Ability to evaluate and assist in the evaluation of security solutions to ensure they meet security requirements for processing classified information and to support security authorization activities.
• Ability to provide configuration management for security-relevant information system software, hardware, and firmware, manage and control system changes, assess the security impact of those changes, and maintain records for workstations, servers, routers, firewalls, intelligent hubs, network switches, and system upgrades.
• Ability to plan and coordinate the implementation of information technology security programs and policies, track and ensure appropriate user identification and authentication mechanisms for information systems, and ensure ongoing compliance with system security policy.
• Ability to provide daily oversight and direction to contractor Information Systems Security Officers and to interact with customers, information technology staff, and high-level corporate officers to define and achieve required Cybersecurity objectives.

Qualifications

• Eight years of combined work-related experience in the fields of information technology, cybersecurity, or security authorization, or twelve years of combined work-related experience if no bachelor’s degree is held, including experience in at least two areas such as current security tools, hardware and software security implementation, communication protocols, or encryption tools and techniques, and familiarity with commercial security products, security authorization techniques, security incident management, and PKI and authorization services.

Skills

• DoD 8570 compliant with IAM I.

Benefits

At Kaizen Approach, we offer a variety of benefits to support your well-being and career growth, including:

• 4 weeks of PTO
• 11 holidays
• Gifted 401k
• Profit sharing
• Paid training

We are committed to creating a diverse and inclusive workplace where everyone feels valued and respected. Kaizen Approach is an Equal Opportunity/Affirmative Action Employer.