ISSO - Information System Security Officer

The Intellekt Group•Hampton, VA

3d•$102,000 - $120,000•Onsite

About The Position

The SCIF Information System Security Officer (ISSO) provides cybersecurity, SCI security, and SCIF administration support to ACC/A2 A26. This position supports the confidentiality, integrity, and availability of USAF Intelligence Community information resources by assisting ACC Cybersecurity Chief ISSO/ISSMs, interfacing with the ACC/A2 SSO office, administering SCI security requirements, and supporting cybersecurity compliance, assessment, authorization, and reporting activities.

Requirements

Journeyman-level experience supporting DoD or Intelligence Community security, cybersecurity, ISSO, ISSM, Information Security Officer, SSO, or SCIF management functions.
Experience administering or supporting SCI security programs, SCIF operations, visitor-control processes, SCI access rosters, classified-media accountability, and security container documentation.
Working knowledge of SCI security, information security, physical security, personnel security, and technical security requirements applicable to a SCIF environment.
Experience with cybersecurity compliance and RMF-related activities, including security plans, POA&Ms, A&A workflows, patch management, IAVAs, FISMA tasks, and ATO support.
Familiarity with DISS and SCI personnel/access administration processes.
Ability to communicate security and cybersecurity requirements clearly to commanders, ISSOs, ISSMs, SSO personnel, Government personnel, contractors, and mission stakeholders.
Strong attention to detail, documentation discipline, and ability to manage recurring compliance requirements with minimal oversight.
Proficiency with Microsoft Office applications and standard Government collaboration tools.
Current Top Secret clearance with SCI eligibility is required.

Nice To Haves

Prior experience as an ISSM, ISSO, SSO, assistant SSO, SCIF manager, or SCI security specialist in a USAF, MAJCOM, ACC, or Intelligence Community environment.
DoD 8140/8570 certification appropriate to the assigned role, such as Security+, CySA+, CGRC/CAP, CASP+, CISM, CISSP, or equivalent, as approved by the customer.
Experience supporting JWICS, classified networks, SCI facility inspections, TEMPEST/TSCM coordination, or RMF/eMASS processes.
Experience supporting ACC/A2, USAF intelligence, or headquarters-level staff operations.

Responsibilities

Operate in accordance with applicable SCI, cybersecurity, and facility-security guidance, including DODM 5105.21, ICD 704, ICD 705, AFMAN 14-403, and applicable DD Form 254 requirements.
Interface with the ACC/A2 SSO office on matters related to SCI materials, SCI access, visitor control, and security compliance.
Administer the division SCI security program and provide SCI security oversight for the division SCIF.
Account for, control, transmit, transport, package, safeguard, disseminate, and destroy SCI material only through authorized processes and to personnel with established access and need to know.
Serve as the official channel for certifying and receiving SCI visitor clearances and accesses; maintain SCIF access rosters and validate clearances for non-badged visitors.
Maintain Defense Information System for Security (DISS) data, SCI access records, alarm access records, container records, SF 700 forms, SF 701 activity checklists, SF 702 security container check sheets, and related security documentation.
Conduct or manage SCI personnel, information, physical, and technical security actions, including support to TEMPEST and TSCM-related procedures when required.
Approve, label, track, and account for classified media; ensure unmarked or unauthorized media and personal electronic devices are not present within the SCIF.
Verify system classification markings, program stickers, hard-drive accountability labels, classification banners, secure phone accountability, emergency contact signage, copier/shredder approval letters, and related facility security requirements.
Conduct recurring facility-security actions, including monthly security-form updates, random entry/exit checks, quarterly alarm testing, and quarterly verification of emergency-exit audible alarms.
Gather, analyze, and report cybersecurity compliance data related to security plans, POA&Ms, Assessment and Authorization workflows, patch management, IAVAs, DoD 8140 certification status, FISMA tasks, and Authorizations to Operate.
Coordinate with unit ISSOs, ISSMs, commanders, cybersecurity trainers, and other stakeholders to provide guidance, resolve compliance issues, and improve cybersecurity program performance.
Assist in developing and delivering on-the-job training for Government, Contractor, and military personnel on applicable IT security tools, policies, and procedures.