Information System Security Officer II

Targeted Solutions, LLC•Camp Springs, MD

About The Position

The Information System Security Officer (ISSO) is responsible for maintaining the appropriate operational security posture of information systems and works closely with the ISSM and ISO. The role requires detailed knowledge and expertise in information system security management and may include day-to-day security operations, physical and environmental protection, personnel security, incident handling, and security training and awareness. The ISSO monitors information systems and their operating environments, develops and updates authorization documentation, and implements configuration management across authorization boundaries. The position assesses the security impact of changes and makes recommendations to the ISSM. Its primary function is supporting Department of Defense agencies and Special Access Programs (SAPs), including HQ Air Force, the Office of the Secretary of Defense, and Military Compartments efforts. The role provides day-to-day support for Collateral, SCI, and SAP activities.

Requirements

Bachelor’s degree or associate degree in a related area plus 2 years of experience, or equivalent experience totaling 4 years.
2–5 years of related experience, especially developing RMF packages or bodies of evidence.
Prior performance in a role such as System/Network Administrator or ISSO.
SAP experience.
DoD 8570.01-M IAM Level II training, in lieu of IAT Level II.
Meet DoD Directive 8570.01-M position and certification requirements for Information Assurance Technician Level II or Information Assurance Manager II within 6 months of hire.
TS/SCI clearance required.
Eligibility for access to Special Access Program Information.
Willingness to submit to a Counterintelligence polygraph.
Must be able to regularly lift up to 50 pounds.

Responsibilities

Develop physical or logical topologies for a system.
Assist the ISSM in meeting their duties and responsibilities.
Prepare, review, and update authorization packages.
Ensure approved procedures are in place for clearing, sanitizing, and destroying hardware and media.
Conduct periodic reviews of information systems to ensure compliance with the security authorization package.
Coordinate system hardware, software, or firmware changes with the ISSM and AO/DAO before changes are made.
Monitor system recovery processes to ensure security features and procedures are properly restored and functioning.
Ensure information system security documentation is current and accessible to authorized individuals.
Ensure audit records are collected, reviewed, and documented, including anomalies.
Attend technical and security training relevant to assigned duties.
Execute the cybersecurity portion of the self-inspection, including security coordination and review of system assessment plans.
Identify cybersecurity vulnerabilities and assist with implementing countermeasures.
Prepare reports on the status of security safeguards applied to computer systems.
Perform ISSO duties in support of in-house and external customers.
Conduct security impact analysis for configuration management changes to authorization boundaries and provide the results to the ISSM.