Information System Security Officer III,

Targeted Solutions, LLC•Lincoln, MA

About The Position

The Information System Security Officer (ISSO) III ensures that information systems maintain an appropriate operational security posture. Working closely with the ISSM and ISO, the ISSO manages system security and may be responsible for day-to-day security operations, including physical and environmental protection, personnel security, incident handling, and security training and awareness. The role monitors information systems and their operating environments, develops and updates authorization documentation, implements configuration management across authorization boundaries, assesses the security impact of changes, and makes recommendations to the ISSM. The position primarily supports Special Access Programs (SAPs) for Department of Defense agencies, including HQ Air Force, the Office of the Secretary of Defense, and Military Compartments efforts. It provides day-to-day support for Collateral, Sensitive Compartmented Information (SCI), and SAP activities, and performs ISSO duties for in-house and external customers. The role also supports Department of Defense, National Agency, and contractor organizations with assessment and authorization efforts.

Requirements

Bachelor’s degree or equivalent experience (4 years).
5–7 years of related experience, especially developing RMF packages or bodies of evidence.
Prior experience in roles such as System/Network Administrator or ISSO.
At least 2 years of SAP experience.
DoD 8570.01-M IAM Level II training, in lieu of IAT-Level II.
TS/SCI clearance.

Responsibilities

Assist the ISSM in meeting duties and responsibilities.
Prepare, review, and update authorization packages.
Ensure approved procedures are in place for clearing, sanitizing, and destroying hardware and media.
Notify the ISSM of changes that might affect information system authorization determinations.
Conduct periodic reviews of information systems for compliance with the security authorization package.
Coordinate hardware, software, or firmware changes with the ISSM and AO/DAO before changes are made.
Monitor system recovery processes to ensure security features and procedures are restored and functioning correctly.
Keep information system security documentation current and accessible to properly authorized individuals.
Ensure audit records are collected, reviewed, and documented, including anomalies.
Attend technical and security training relevant to assigned duties.
Execute the cybersecurity portion of self-inspections and provide security coordination and review of system assessment plans.
Identify cybersecurity vulnerabilities and assist in implementing countermeasures.
Prepare reports on the status of security safeguards applied to computer systems.
Conduct continuous monitoring activities for assigned authorization boundaries.
Support DoD, National Agency, and contractor organizations in developing assessment and authorization efforts.