Senior Information System Security Officer (ISSO)-1

Amentum•Crane, IN

5d•Onsite

About The Position

Amentum is seeking a Senior Information System Security Officer (ISSO) to support Program Offices within the Department of Defense Strategic Systems Programs (SSP). The ISSO will provide support for non-enterprise information systems of large-scaled programs of record (POR), as well as multiple Science and Technology (S&T) programs. The System ISSO will offer direct support to the Program Office Technical Lead onsite at NSWC Crane and is expected to travel regularly to SPHQ or Field Activities. The System ISSO is responsible for ensuring that the appropriate operational Cybersecurity posture is maintained for the systems under their purview. They ensure that the applicable system level security objectives are defined for implementation and assist in creating the security authorization package. This role involves implementing security controls in alignment with the Risk Management Framework (RMF), documenting security measures, overseeing the security posture of information systems operating under Interim Authorization to Test (IATT), preparing authorization packages, and collaborating with various stakeholders to ensure system security. The position also requires collaboration with System Administrators to ensure security configurations, patches, and access controls are implemented and maintained during testing, and developing requirements for large-scale or service-specific pilot projects. Additionally, the ISSO will support the Program Office's DoD Acquisition process by preparing, reviewing, and presenting Objective Quality Evidence (OQE) such as Cyber Security Strategy, GAO responses, Clinger Cohen Act, and Cyber Test & Evaluation Strategy, in compliance with SSP Regulations. The role includes supporting the Program Office Technical Lead in identifying issues and action items, documenting OQE, participating in ISSO discussions, and managing customer interactions with Program Offices and associated contractors/subcontractors through teleconferences and on-site meetings. The ISSO will interface with the SSP Functional Authorizing Official (FAO) and coordinate with stakeholders, including SSP representatives and contractors/subcontractors, through various communication channels and meetings. Support in developing technical presentations and providing comments on technical content is also expected. The ISSO will develop System Security Plans detailing implemented security controls and work with SSP programs to maintain lifecycle plans, overseeing the application of Security Technical Implementation Guides (STIGs) and ensuring timely vulnerability scans, as well as evaluating performer deliverables and presentations.

Requirements

Bachelor of Science Degree in Cybersecurity, Computer Science, Computer Engineering or equivalent
5+ years of relevant experience
CompTIA Security+ or equivalent certification
Ability to collaborate with large and highly competent technical teams.
Strategic high-level thinking
Ability/experience with planning an initiative involving large-scale, networked systems.
Ability to obtain and maintain a US Security Clearance (Note: Must be a United States citizen to obtain clearance.)
Willing and able to travel 40% or more.

Nice To Haves

10+ years of relevant experience
Graduate degree in Cybersecurity
Certified Information Systems Security Professional (CISSP) certification
Certified Information Security Manager (CISM) certification
Active Top Secret Clearance

Responsibilities

Ensure systems are accredited, and the standard operating procedures include required security procedures.
Ensure that the systems are operated and maintained such that they stay within the accepted level of residual Cybersecurity risk.
Ensure that Cybersecurity documentation is developed, maintained, and updated as required.
Implement SSP responses to DoD IAVAs and IAVBs.
Initiate investigative procedures for security events, and institute protective or corrective measures when a security incident or vulnerability is discovered.
Report in conjunction with the User Representative (UR) to the branch ISSM on Cybersecurity incidents.
Work with the URs to ensure that incident response plans and contingency plans are developed and tested prior to system operation and annually thereafter, and results documented in the Security Authorization Package.
Participate in all engineering reviews for systems under their cognizance.
Implement security controls in alignment with the Risk Management Framework (RMF).
Document security measures.
Oversee the security posture of information systems operating under Interim Authorization to Test (IATT).
Prepare authorization packages.
Work with various stakeholders to ensure the system's security.
Collaborate with System Administrators to ensure security configurations, patches, and access controls are implemented and maintained during testing.
Develop requirements for large-scale or service specific pilot projects.
Support (prepare, review, and present) the Program Office's DoD Acquisition process in the development of the Objective Quality Evidence (OQE) (i.e. Cyber Security Strategy, GAO responses, Clinger Cohen Act, Cyber Test & Evaluation Strategy, etc.) for multiple programs, in compliance with SSP Regulations.
Support the Program Office Technical Lead as needed identifying issues and action items, document OQE, and participating in ISSO discussions.
Provide customer interactions with Program Offices and associated contractors/subcontractors.
Interface with the SSP Functional Authorizing Official (FAO, formerly AODR).
Coordinate and collaborate with the stakeholders, including SSP representatives and contractors/subcontractors through assessments, subject matter expert input to proposals, technical interchange meetings, status teleconferences, email correspondence, and other meetings as required.
Support development of technical presentations and provide comments on the technical content.
Develop System Security Plans detailing the security controls implemented for each information system.
Work with SSP programs to develop and maintain lifecycle plans.
Oversee the application of Security Technical Implementation Guides (STIGs) and ensure vulnerability scans are completed in a timely manner.
Evaluate performer deliverables and presentations.