Information System Security Officer (ISSO)

Torch Technologies, Inc.•Huntsville, AL

4d•Onsite

About The Position

Torch Technologies Inc. is seeking a talented Information System Security Officer (ISSO) to support our Air & Missile Defense Business Unit. As an ISSO, your duties will include carrying out all phases of the information systems/networks security program that involves access to computers and computerized data, enabling the company to meet contractual requirements for networks security. This role requires conducting regular audits to ensure systems are operated securely and that information systems security policies and procedures are implemented as defined in security plans. The ISSO will develop, update, and manage Authorization to Operate (ATO) packages, navigate and maintain system records within the Enterprise Mission Assurance Support Service (eMASS), and execute continuous monitoring strategies. This includes reviewing audit logs, analyzing vulnerability scans, and verifying system configuration baselines. The role involves implementing, enforcing, and assessing NIST SP 800-53 security controls, and applying and verifying Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs). Additionally, the ISSO will utilize the Assured Compliance Assessment Solution (ACAS) for vulnerability scanning and remediation coordination, and draft, review, and maintain System Security Plans (SSP), continuous tracking of Plan of Action and Milestones (POA&M), and system-specific operating procedures. A deep understanding of the NIST RMF lifecycle, DoDI 8510.01, and US Army-specific guidance (e.g., AR 25-2, DA Pam 25-2-14) is essential.

Requirements

US Citizenship.
Bachelor's Degree in Computer Science, a related field or equivalent experience.
A minimum of 5- 8 years of relevant experience.
Must maintain a DoW 8140 / 8570.01-M certification (Security + CE at the minimum).
Requires a final DoW Secret clearance at hire and this level must be maintained throughout employment tenure.

Nice To Haves

Deep understanding of the NIST RMF lifecycle, DoDI 8510.01, and US Army-specific guidance (e.g., AR 25-2, DA Pam 25-2-14).

Responsibilities

Carry out all phases of information systems/networks security program that involves access to computers and computerized data enabling company to meet contractual requirements for networks security.
Conduct regular audits to ensure that systems are being operated securely, and information systems security policies and procedures are being implemented as defined in security plans.
Develop, update, and manage Authorization to Operate (ATO) packages.
Navigate and maintain system records within the Enterprise Mission Assurance Support Service (eMASS).
Execute continuous monitoring strategies.
Review audit logs, analyze vulnerability scans, and verify system configuration baselines remain intact.
Implement, enforce, and assess NIST SP 800-53 security controls.
Apply and verify Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
Utilize the Assured Compliance Assessment Solution (ACAS) to scan for, identify, and coordinate the remediation of system vulnerabilities.
Draft, review, and maintain System Security Plans (SSP), continuous tracking of Plan of Action and Milestones (POA&M), and system-specific operating procedures.