Information Systems Security Officer (ISSO)

Overview

The Information Systems Security Officer (ISSO) will be responsible for reviewing, implementing, updating and documenting ESTS lab’s information, security policies and procedures, managing security audits, vulnerability and threat assessments, directing responses for system intrusions, and ensuring fulfillment of legal and contractual information security and privacy mandates, preventing and detecting intrusion.

Responsibilities

• Demonstrate a strong knowledge of cybersecurity principles and DoD requirements relevant to the confidentiality, integrity, availability and authentication of systems operating in a classified environment
• Ensure compliance with the Chapter 8 regulatory requirements of the with National Industrial Security Program Operating Manual (NISPOM)
• Applies current computer science technologies to the development, evaluation, and integration of computer systems and networks to maintain system security for classified information systems. Primary liaison to the local Defense Counterintelligence and Security Agency (DCSA) Information Systems Security Professional (ISSP) on all matters pertaining to classified information systems
• Propose, coordinate, implement, and enforce information systems security policies, standards, and methodologies
• Support the development and maintenance of technical documentation and standard operating procedures (SOPs)
• Execute the security assessment and authorization process for Risk Management Framework (RMF) requirements
• Support the Security Manager with site accreditation/reaccreditation process
• Perform updates to Risk Management Framework accreditation documentation for assigned systems
• Prepare and submit classified spillages/incident responses
• Performs other duties as assigned

Qualifications

     Education:

• High School Diploma or GED required; Bachelor’s Degree preferred

Experience:

• Three years of relevant work experience as a Security Analyst to include; developing, editing, and auditing cyber security policies, plans, and procedures for government systems and programs
• Knowledge and experience working with NIST security controls and regulations required
• Experience conducting vulnerability audits, security configuration checks, and system configuration scans to meet Cyber Security requirements required

Any combination of education/experience may be substituted for job requirements at the recommendation of the hiring manager and approval of the COO or higher.