Information System Security Officer (ISSO) - Tucson, AZ

RTX•Tucson, AZ

4d•$68,900 - $131,100•Onsite

About The Position

RTX’s cybersecurity team is seeking an Information System Security Officer (ISSO) to support its team 100% onsite at its Tucson, Arizona facility. The role interfaces and collaborates with the Information Systems Security Manager (ISSM) to ensure adherence to NISPOM Chapter 8, DAAPM, and JSIG policies. The ISSO is primarily responsible for system compliance, auditing, security plan development, and delivering information systems security education and awareness. The role also assists with investigating information system security violations and preparing reports that specify corrective and preventative actions. It routinely collaborates with the facility security team, program personnel, and government representatives, and performs security sustainment activities such as hardware and software change management, account management, media protection, user interface support, and file transfers. Within six months of hire, the employee must obtain and maintain a security professional certification commensurate with IAM Level I certification, such as Security+, if they do not already hold one. An active and transferable U.S. government-issued Secret clearance is required before the start date and must be active on day one; U.S. citizenship is required for eligibility for the clearance.

Requirements

Typically requires a university degree and at least 2 years of relevant experience, or an advanced degree in a related field.
An active and transferable U.S. government-issued Secret security clearance is required before the start date and must be active on day one.
U.S. citizenship is required because only U.S. citizens are eligible for the required security clearance.
If not already held, obtain and maintain within six months of hire a security professional certification commensurate with IAM Level I certification, such as Security+ or another qualifying certification.
Relevant experience may include cybersecurity, systems security, or hardening.
Relevant experience may include information technology.
Relevant experience may include compliance-based auditing using RMF, DAAPM, JSIG, NISPOM, or non-defense regulations or standards such as FAA, PCI, ISO 9001, or HIPPA.
Relevant experience may include working with or supporting computer technologies such as databases, operating systems, computer network hardware, software programs, hardware troubleshooting, or electronics.
Relevant experience may include physical security, security, policework or criminal justice, investigations, or Border Patrol.
Relevant experience may include project or program management, office management, senior administration, or account management.

Nice To Haves

Experience working in DoD classified operating or laboratory environments.
Familiarity with the cybersecurity Risk Management Framework (RMF) and compliance under NISPOM/DAAPM, JSIG, ICD 503, STIGs, and associated NIST publications.
Experience with audit reviews such as physical security, network and system event logs, password administration, and file access privileges.
Familiarity with the execution and management of cyber incident response, including preservation, containment, and eradication.
Ability to work independently and as a member of a team.
Self-motivation and exceptional written and verbal communication skills, particularly in documenting evaluation results.
Customer focus, adaptability, and willingness to work varying assignments.
Completion of National Industrial Security Program cybersecurity training courses.

Responsibilities

Ensure system compliance with applicable security policies.
Conduct auditing and develop security plans.
Deliver information systems security education and awareness.
Assist in investigating information system security violations.
Help prepare reports specifying corrective and preventative actions.
Collaborate with the facility security team, program personnel, government representatives, and the Information Systems Security Manager.
Perform security sustainment activities, including hardware and software change management, account management, media protection, user interface support, and file transfers.

Benefits

Medical insurance
Dental insurance
Vision insurance
Life insurance
Short-term disability
Long-term disability
401(k) match
Flexible spending accounts
Flexible work schedules
Employee assistance program
Employee Scholar Program
Parental leave
Paid time off
Holidays
Annual short-term and/or long-term incentive compensation programs may be available depending on position level and collective-bargaining coverage; payments are not guaranteed.