Information System Security Officer

CAE•Arlington, TX

About The Position

As an Information Systems Security Officer (ISSO), the employee joins CAE USA, Inc.’s Classified Cyber Security Team supporting Department of Defense programs. The role helps ensure classified information systems meet cybersecurity requirements and government directives. The ISSO works with program management, program personnel at offsite locations, government Authorizing Officials, cybersecurity professionals, engineers, architects, and developers to advance cybersecurity goals and maintain compliance across an assigned portfolio. The position provides leadership and mentorship to cybersecurity team members and oversees security requirements, risk assessment, system authorization, security documentation, configuration management, continuous monitoring, incident investigation, and the implementation of secure technical solutions. The successful candidate is expected to bring cybersecurity expertise, project management capability, leadership, collaborative teaming, and process-improvement experience. The work is performed in a professional office environment using standard office equipment, and some travel may be required. The employee must be eligible for a DoD Personal Security Clearance. Due to U.S. Government contract requirements, only U.S. citizens are eligible.

Requirements

Graduate degree and a minimum of 5 years of prior related experience, or a bachelor’s degree in a STEM discipline and a minimum of 7 years of prior relevant experience.
Currently possess an active DoD 8570.01-M IAM Level II certification, such as CISSP, CISM, or GSLC.
Subject-matter expertise in security standards, frameworks, rules, regulations, and system trust principles, such as FIPS, NIST SP 800 Series, JSIG, DAAPM, and/or ICD.
Experience managing cybersecurity requirements and/or teams operating in collateral, Special Access Program (SAP), and/or Sensitive Compartmented Information (SCI) environments for an enterprise or major business portfolio of programs.
Experience interfacing successfully with internal and external customers, including DCSA, AO/DAO, GCAs, IT, Program Managers, Program Engineering, and Cyber Architects/Engineers.
Experience leading authorization and approval of classified information systems.
Experience managing people and technical resources.
Excellent oral and written communication skills.
Strong critical-thinking and problem-solving skills.
Self-motivated, with good written, verbal, listening, and presentation skills, particularly in documenting evaluation results.
Ability to prioritize multiple projects effectively.
Ability to work in a team environment and deal effectively with changing project priorities.
U.S. citizenship, due to U.S. Government contract requirements.
Must be eligible for a DoD Personal Security Clearance.
Ability to operate a personal computer and sit at a workstation for extended periods.
Ability to lift 50 pounds.

Nice To Haves

Working knowledge of Windows and Linux environments.
Experience with SIEM and compliance-scanning tools such as Splunk, Nessus, ACAS, SCC SCAP, Solar Winds, STIG Viewer, or Vulnerator.
Self-driven and results-oriented, with the ability to manage multiple tasks concurrently in an ambiguous and uncertain environment.
Ability to motivate, inspire, and develop Cybersecurity Team members.
Project management experience.

Responsibilities

Integrate the Classified Cyber Security Program function with Program Management leadership to execute strategic cybersecurity goals for the assigned portfolio.
Assist program personnel at offsite locations with meeting U.S. Government certification requirements, receiving appropriate training, and maintaining security compliance.
Provide leadership and mentorship to Cyber Security Professional team members working toward tactical milestones.
Serve as the primary liaison with government Authorizing Officials for business within the area of responsibility.
Interpret the Joint Special Access Program Implementation Guide (JSIG) to determine technical Information Assurance requirements.
Conduct cyber risk assessments, including vulnerability analysis and analysis of mitigation solutions, and ensure proper implementation of the Risk Management Framework.
Develop system documentation for information-system authorization, security management, and continuous monitoring of networked and standalone systems.
Ensure selected security controls are implemented and operating as intended throughout the information-system lifecycle.
Coordinate and drive continuous monitoring in accordance with DoD requirements, including monitoring security infrastructure and alarm devices for Indicators of Compromise using SIEM and cybersecurity toolsets.
Perform hardware and software configuration management.
Conduct technical investigations, contain data-integrity issues, and assist with reports of investigation for Information Assurance-related security events.
Coordinate with cyber systems security engineers, system architects, and developers to oversee development of secure technical solutions.
Participate in implementation of current and future security domains and architectures, including those that may introduce new service areas.
Comply with company security and data-protection policies, properly mark and handle information and materials, and restrict access to authorized personnel with a need to know.