Information Systems Security Officer (ISSO)

Job Type

Full-time

Description

The Information Systems Security Officer (ISSO) supports the operational security posture of assigned information systems, programs, and enclaves by implementing and enforcing applicable security policies, standards, and methodologies. Working under the direction of senior ISSOs and the Information System Security Manager (ISSM), the ISSO maintains information assurance compliance, supports authorization activities, and manages security documentation. The ISSO also assesses vulnerabilities and risks, evaluates the security impact of system changes, and supports day-to-day security operations for systems processing classified information.

ROLES AND RESPONSIBILITIES

Support senior ISSOs and the ISSM in maintaining the security posture of assigned classified information systems. Specific responsibilities include:

Security Policy and Authorization
• Support senior ISSOs and the ISSM in implementing, enforcing, and maintaining information systems security policies, standards, procedures, and methodologies.
• Plan, coordinate, and support IT security programs and policies, including development and maintenance of system security policies that support compliance with customer, IC, DoW, and NIST RMF requirements.
• Support security authorization and A&A activities in accordance with applicable IC, DoW, customer, and NIST RMF policies, including preparation and coordination of authorization artifacts.

Documentation, Assessment, and Risk
• Maintain and update required security documentation, including System Security Plans (SSPs), Risk Assessment Reports, Assessment and Authorization (A&A) packages, System Requirements Traceability Matrices (SRTMs), and other information assurance documentation.
• Perform vulnerability, compliance, and risk-assessment analysis to support certification, accreditation, continuous monitoring, and remediation activities.
• Evaluate security solutions, system changes, and configuration updates to determine security impact and suitability for systems processing classified information.

Configuration Management and Security Operations
• Provide security-relevant Configuration Management (CM) support for information system software, hardware, firmware, and system components, including maintaining records for workstations, servers, routers, firewalls, hubs, switches, upgrades, and related assets.
• Support day-to-day security operations, including user identification and authentication processes, security control monitoring, incident coordination, compliance tracking, and transition activities associated with ConMon activities.

KNOWLEDGE

Information Assurance and RMF
• NIST RMF and Assessment and Authorization (A&A) processes for classified information systems.
• IC, DoW, and customer information assurance and security policies, standards, and methodologies.
• Vulnerability management, continuous monitoring (ConMon), and security-focused configuration management.

SKILLS

Security Documentation and Assessment
• Develop and maintain SSPs, Risk Assessment Reports, A&A packages, SRTMs, POA&Ms, and security control implementation statements.
• Perform vulnerability, compliance, and risk-assessment analysis and support remediation tracking through closure.
• Evaluate the security impact of system changes and configuration updates and maintain CM records for system components.

ABILITIES

Coordination and Execution
• Work effectively under the direction of senior ISSOs and the ISSM.
• Coordinate with ISSMs, system owners, technical teams, and government security stakeholders.
• Maintain accurate, current security documentation and compliance tracking in support of day-to-day security operations.

SYSTEMS AND TECHNICAL ENVIRONMENT
• Classified information systems, programs, and enclaves
• Workstations, servers, routers, firewalls, hubs, and switches
• System software, hardware, firmware, and related assets under configuration management

SECURITY & COMPLIANCE
• NIST RMF; IC, DoW, and customer security policies; DoW 8140/8570
• SSPs, Risk Assessment Reports, A&A packages, SRTMs, and POA&Ms • Vulnerability management and continuous monitoring (ConMon) artifacts

Requirements

EDUCATION

• Degree Bachelor's degree in a technical, cybersecurity, information assurance, or related discipline from an accredited college or university.
• Five (5) years of additional information assurance, cybersecurity, or security engineering experience may be substituted for a bachelor's degree.

EXPERIENCE

• Minimum Experience supporting ISSO, information assurance, cybersecurity compliance, security authorization, or RMF activities on programs and contracts of similar scope, type, and complexity.

CERTIFICATION

• Required Must meet applicable DoW 8140/8570 requirements for the position.

OTHER

• Citizenship Must be a U.S. Citizen
• Additional Fully on-site at Fort Meade, MD; no travel required

SECURITY CLEARANCE

• Required Active TS/SCI clearance with Full Scope (FS) Polygraph

Salary Range Estimate: Min $153,253.68 and Max $191,567.10

The estimate displayed represents the typical salary range for this position and is just one component of Pueo's total compensation package for employees. Other rewards may include annual bonuses, short- and long-term incentives, and program-specific awards. In addition, Pueo provides a variety of benefits to employees.

Salary Description

$153,253.68 to $191,567.10