Job DescriptionThe Information Systems Security Officer (ISSO):
- Provides support for a program, organization, system, or enclave's information assurance program.
- Provides support for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies.
- Maintains operational security posture for an information system or program to ensure information systems security policies, standards, and procedures are established and followed.
- Assists with the management of security aspects of the information system and performs day-to-day security operations of the system.
- Evaluates security solutions to ensure they meet security requirements for processing classified information.
- Performs vulnerability/risk assessment analysis to support certification and accreditation.
- Provides configuration management (CM) for information system security software, hardware, and firmware.
- Manages changes to system and assesses the security impact of those changes.
- Prepares and reviews documentation to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs).
Supports security authorization activities in compliance with NSA/CSS Information System Certification and Accreditation Process (NISCAP) and DoD Risk Management Framework (RMF).
Education/Experience:Bachelor of Science degree in Computer Science, Information Assurance, Information Security, or related discipline and 12 or more years of related experience.
Minimum of 7+ years of experience as an ISSO supporting IC or DoD programs and contracts of similar scope, type, and complexity.
DoD 8570 compliance with IAM Level II or IAT Level III (i.e., CASP, CISSP, or Associate)
Experience in the following:
LatteArt
Biscotti
Xacata
Salary: $125,000-$215,000. This represents the typical salary range for this position, but is not guaranteed. Salary is based on experience, location and contractual requirements which could fall outside of the range listed.
