Information System Security Officer (ISSO)

KIHOMAC•Huntsville, AL

2d•$120,000 - $140,000

About The Position

Perform verified risk assessments that cover all the security controls and policies that are aligned with Joint SAP Implementation Guide (JSIG) methodologies Develop and maintain artifacts in support of Control Validation Tests (CVT) to confirm compliance with ATOs for SAP packages Hands-on experience conducting audits with both Windows and Linux systems Understand STIGs and utilize experience with STIG viewer Monitor and assist with implementing security controls ·Manage and monitor Plan of Action and Milestones (PO&AMs) effectively Conduct routine audit management Monitor and validate patch management Monitor and validate endpoint security Develop security metrics and reporting and be able to articulate the metrics Other duties as assigned

Requirements

Bachelor’s Degree in management or other relevant discipline preferred
DoD 8570 IAT Level II Certification (ex: Security+) required
DoD 8570.01 IAM Level II Certifications (ex: CGRC (CAP) or SecurityX (CASP+CE) required
4+ years of general (full-time) work experience
An advanced degree may be substituted for experience
2+ years of directly related experience
1+ years of experience working in a management or leadership role
Proficiency and experience with Windows and Linux Systems IOS required
Must be a US citizen
Candidate must be in possession of a DoD issued Top Secret Clearance with SCI eligibility
Able to occasionally reach with hands and arms
Prolonged periods of computer screen use, while sitting or standing at a desk
Adhere to safety protocols when in work areas requiring use of PPE (e.g. eyewear, gloves, masks, hearing protection, steel toed shoes, etc.)
Able to safely lift and carry up to 20 pounds at a time

Nice To Haves

Experience with SolarWinds – SEM tool preferred

Responsibilities

Perform verified risk assessments that cover all the security controls and policies that are aligned with Joint SAP Implementation Guide (JSIG) methodologies
Develop and maintain artifacts in support of Control Validation Tests (CVT) to confirm compliance with ATOs for SAP packages
Hands-on experience conducting audits with both Windows and Linux systems
Understand STIGs and utilize experience with STIG viewer
Monitor and assist with implementing security controls
Manage and monitor Plan of Action and Milestones (PO&AMs) effectively
Conduct routine audit management
Monitor and validate patch management
Monitor and validate endpoint security
Develop security metrics and reporting and be able to articulate the metrics
Other duties as assigned