Information System Security Officer

About This Role

The Information System Security Officer (ISSO) will ensure the security of information systems by following established policies, conducting risk assessments, and maintaining compliance with security regulations for the Department of Defense.

Responsibilities

• Follow information security policies, methods, standards, Federal Information Security Management Act (FISMA/NIST) standards and practices to organizational information systems, IT reference materials and interpret regulations.
• Conduct risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, rules, and protection needs tailored through the Risk Management Framework (RMF).
• Assist the ISSM in meeting their duties and responsibilities and assume ISSM responsibilities in their absence.
• Ensure systems are operated, maintained, and disposed of in accordance with security policies and procedures as outlined in the security authorization package.
• Attend required technical and security training relative to assigned duties.
• Report all security-related incidents to the ISSM.
• Conduct periodic reviews of information systems to ensure compliance with the security authorization package.
• Coordinate any changes or modifications to hardware, software, or firmware of a system with the ISSM and AO/DAO prior to the change.
• Monitor system recovery processes to ensure security features and procedures are properly restored and function correctly.
• Ensure all IS security-related documentation is current and accessible to properly authorized individuals.
• Ensure audit records are collected, reviewed, and documented (to include any anomalies).

Requirements

• Familiarity with security compliance processes and an understanding of the steps involved in supporting an Authority to Operate (ATO) lifecycle.
• Familiarity with researching applicable regulations, standards, and security requirements and summarize findings to support secure system operations.
• Basic understanding of information security concepts, including common tactics and techniques used by malicious actors, and awareness of approaches to mitigate vulnerabilities
• U.S. citizenship
• Active SECRET clearance
• Eligibility for TOP SECRET upgrade

Qualifications

• Bachelor’s in an applicable discipline

Nice to Have

• Knowledge and expertise in Cybersecurity requirements, network technologies, and computer security as applied to Department of Defense (DoD) networks
• Experience developing SOPs and SSPs
• Excellent verbal and written communication skills along with customer interaction and presentation capabilities

Skills

* Required skills

Certifications