Traveling Information Systems Security Officer (ISSO)-EN

About Us

CAE’s vision is to be the worldwide partner of choice in defense and security, and civil aviation by revolutionizing our customers’ training and critical operations with digitally immersive solutions to elevate safety, efficiency and readiness.

CAE's Defense and Security business unit focuses on helping prepare military customers to develop and maintain the highest levels of mission readiness. Our values—Empowerment, Innovation, Excellence, Integrity and OneCAE—define who we are and guide how we make a difference in the world while supporting each other’s success.

We offer a comprehensive and competitive benefits package, a work environment where employees are valued and safe, and the freedom to succeed through teamwork, initiative, and recognition. Professional development, advancement opportunities, and fun are also part of the experience.

About the Role

The Traveling Information Systems Security Officer (ISSO) supports the Lead ISSO in planning, organizing, staffing, managing, and maintaining the cybersecurity and Risk Management Framework (RMF) program for C-17 Training Systems (TS). This role ensures compliance with U.S. Government cybersecurity requirements, manages vulnerability assessments, oversees accreditation activities, and serves as the primary site security interface for internal and external stakeholders. The Traveling ISSO supports sustainment activities, integrates cybersecurity controls into system updates, monitors system posture, and assists in maintaining security authorization packages. Frequent travel to customer and site locations is required to ensure consistent security practices and alignment with contractual and regulatory directives.

Responsibilities

• Ensure compliance with cybersecurity frameworks, policies, and procedures (NIST, DoD, Air Force).
• Perform required vulnerability and compliance scans using DoD-approved tools.
• Conduct system security audits, vulnerability assessments, and risk analyses.
• Monitor and enforce controls within eMASS and support system accreditation under RMF.
• Assist in preparing and maintaining RMF security authorization documentation, including System Security Plans (SSPs) and POA&Ms.
• Provide cybersecurity support for C-17 sustainment activities, including upgrades, patching, and configuration management.
• Collaborate with maintenance, operations, and engineering teams to integrate cybersecurity into sustainment workflows.
• Manage and respond to system security incidents, ensuring proper documentation and mitigation.
• Continuously monitor C-17 information systems for anomalies or security events.
• Provide technical guidance on secure configuration, operation, and maintenance of sustainment systems.
• Support secure implementation and testing of system backups, redundancy processes, and disaster recovery procedures.
• Ensure cybersecurity activities meet compliance standards under DoD 8500.01 and related directives.
• Prepare reports on system security posture, risk assessments, and audit findings for leadership and regulatory bodies.
• Support delivery of security awareness training and best practices for system users and maintainers.
• Serve as liaison between cybersecurity, IT, sustainment, and aircraft support teams.
• Interface with government and contractor stakeholders to ensure alignment with broader sustainment and cybersecurity objectives.
• Promote a security-focused culture within cross-functional teams.
• Support cybersecurity proposal development and Basis of Estimate (BOE) activities.
• Maintain cybersecurity schedules and support coordination efforts directed by the Lead ISSO.
• Perform other duties as assigned.

Requirements

• Bachelor’s degree in Information Technology, Cybersecurity, Data Science, Information Systems, Computer Science, or related field.
• At least 5 years of professional cybersecurity experience.
• U.S. citizenship is required due to U.S. Government contract requirements.
• Must be eligible for DoD Personal Security Clearance.

Preferred Skills

• Ability to read, analyze, and interpret complex technical documentation.
• Ability to respond professionally to sensitive inquiries or customer concerns.
• Ability to prepare and deliver detailed oral and written presentations.
• Strong analytical skills for defining problems, collecting data, and drawing valid conclusions.
• Ability to interpret customer requirements across verbal, non-verbal, and written communication.
• Ability to read and understand electrical schematics and drawings.

Security Responsibilities

• Comply with all company security and data protection/usage policies and procedures.
• Personally responsible for proper marking and handling of all information and materials, in any form.
• Shall not divulge any information, or afford access, to other employees not having a need-to-know.
• Shall not divulge information outside the company without management approval.
• All government and proprietary information will be accessed and stored electronically on company-provided resources.

Work Environment

• Work may occur in shop-floor environments or near training systems.
• May be exposed to mechanical equipment, hydraulics, electrical components, extreme heat, airborne particles, or loud noise.
• Must communicate using standard office equipment, including computers and phones.
• Domestic and international travel may be required.

Physical Demands

• Ability to lift up to 40 pounds overhead.
• Ability to walk, climb stairs, and access simulator or cockpit environments.
• Ability to stoop, bend, or crawl on or under devices when needed.
• Ability to detect odors, noises, or other environmental cues related to equipment performance or surroundings.