Information System Security Officer (ISSO)

OMNI Consulting Solutions•Chantilly, VA

4d•Onsite

About The Position

OMNI Consulting Solutions is seeking an Information System Security Officer (ISSO) to execute day-to-day cybersecurity activities in support of the Information System Security Manager (ISSM). This role involves system audits, user account reviews, security monitoring, compliance tracking, and documentation maintenance for assigned information systems. The ISSO will play a crucial part in maintaining the security posture of classified networks and supporting assessment and authorization activities.

Requirements

Bachelor's degree in a technical field (Computer Science, Information Technology, Cybersecurity, or related) or equivalent experience.
Active TS/SCI clearance.
Experience (10+ years) in cybersecurity/information assurance or systems security administration.
DoD 8570/8140 IAT/IAM Level II certification (e.g., Security+, CySA+, CISSP-Associate, or equivalent).
Working knowledge of RMF processes and system audit/monitoring procedures.
Familiarity with system hardening and access control administration on classified networks.
U.S. Citizenship required

Nice To Haves

CI polygraph.
Experience with eMASS, ACAS, and/or HBSS/ESS tools.
Prior ISSO experience on IC or USSF/DoD programs.

Responsibilities

Execute day-to-day cybersecurity operations for assigned information systems in support of the ISSM.
Conduct system audits, log reviews, and user account/access reviews for compliance with security policy.
Monitor system security posture and support continuous monitoring and vulnerability scanning activities.
Maintain and update system security documentation, including SSPs, POA&Ms, and configuration records.
Support RMF assessment and authorization activities, including evidence collection for control implementation.
Track and report security-relevant events, incidents, and compliance findings to the ISSM.
Support account provisioning/de-provisioning and access control administration.
Assist with security awareness training and enforcement of system security procedures for end users.