Information System Security Officer II

Targeted Solutions, LLC•Cheyenne, WY

5d•Onsite

About The Position

The Information System Security Officer II (ISSO) is responsible for maintaining the appropriate operational security posture for an information system, working closely with the Information System Security Manager (ISSM) and Information System Owner (ISO). This role requires detailed knowledge and expertise in managing the security aspects of an information system, often encompassing day-to-day security operations, including physical and environmental protection, personnel security, incident handling, and security training and awareness. The ISSO will collaborate with the ISSM and ISO to monitor information systems and their operating environments, develop and update authorization documentation, and implement configuration management across authorization boundaries. This includes assessing the security impact of changes and providing recommendations to the ISSM. The primary focus of this position is supporting Special Access Programs (SAPs) for Department of Defense (DoD) agencies, such as HQ Air Force, Office of the Secretary of Defense (OSD), and Military Compartments efforts, providing day-to-day support for Collateral, Sensitive Compartmented Information (SCI), and Special Access Program (SAP) activities.

Requirements

Bachelor’s degree or associate degree in a related area + 2 years’ experience OR equivalent experience (4 years)
TS/SCI clearance
Current clearance as defined in ATTACHMENT VI
Eligibility for access to Special Access Program Information
Willingness to submit to a Counterintelligence polygraph
2-5 years related experience, especially in developing RMF packages or bodies of evidence
Prior performance in roles such as System/Network Administrator or ISSO
SAP experience
DoD 8570.01-M IAM Level II (in lieu of IAT Level II) certification
Must meet position and certification requirements outlined in DoD Directive 8570.01-M for Information Assurance Technician Level II or Information Assurance Manager II within 6 months of the date of hire

Responsibilities

Develop physical or logical topologies for a system.
Assist the ISSM in meeting their duties and responsibilities.
Prepare, review, and update authorization packages.
Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media.
Conduct periodic reviews of information systems to ensure compliance with the security authorization package.
Coordinate any changes or modifications to hardware, software, or firmware of a system with the ISSM and AO/DAO prior to the change.
Monitor system recovery processes to ensure security features and procedures are properly restored and functioning correctly.
Ensure all IS security-related documentation is current and accessible to properly authorized individuals.
Ensure audit records are collected, reviewed, and documented (to include any anomalies).
Attend required technical and security training (e.g., operating system, networking, security management) relative to assigned duties.
Execute the cyber security portion of the self-inspection, to include provide security coordination and review of all system assessment plans.
Identify cyber security vulnerabilities and assist with the implementation of the countermeasures for them.
Prepare reports on the status of security safeguards applied to computer systems.
Perform ISSO duties in support of in-house and external customers.
Conduct security impact analysis activities and provide to the ISSM on all configuration management changes to the authorization boundaries.