ISSO SME

Noetic Strategies • Huntsville, AL

3d • Onsite

About The Position

Noetic is seeking an Information System Security Officer (ISSO) – Subject Matter Expert (SME) to support the implementation, oversight, and maintenance of information system security configurations, controls, practices, and procedures. The ISSO will serve as a principal security advisor to system owners and information security leadership, ensuring systems maintain appropriate security controls and supporting the Authority to Operate (ATO) documentation and accreditation process. The position is located in Huntsville, Alabama.

Requirements

• Bachelor of Science (B.S.) or Bachelor of Arts (B.A.) degree.
• Experience implementing, overseeing, and maintaining security configurations, practices, and procedures for information systems.
• Excellent verbal and written communication skills.
• Strong interpersonal skills.

Nice To Haves

• Experience with Xacta.
• CISSP or a CompTIA certification.

Responsibilities

• Serve as the principal advisor to the Information System Owner (SO), Business Process Owner, Chief Information Security Officer (CISO), and Information System Security Manager (ISSM) on information system security matters.
• Ensure implementation and ongoing maintenance of required security controls.
• Direct and implement security controls and procedures to protect information system assets from intentional or inadvertent modification, disclosure, or destruction.
• Provide guidance to other functional units regarding the physical protection of information system assets.
• Report on the effectiveness of data security measures and recommend new or improved security procedures.
• Assist with reviewing, developing, and guiding system teams and customers through the Authority to Operate (ATO) accreditation and certification documentation process.
• Perform network self-inspections to assess compliance with applicable security requirements.
• Create and update documentation required for the ATO package, including the System Security Plan (SSP) and Information System Contingency Plan.
• Develop Plans of Action and Milestones (POA&Ms) based on vulnerability data and enter findings into the designated system of record.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior