ISSO - Information System Security Officer

The Intellekt Group•San Angelo, TX

4d•Onsite

About The Position

The ISSO will support the Information System Security Managers (ISSM) and mid-level ISSO in the execution of 17 TRG cybersecurity programs, participating in the integration (planning, testing, implementation, & securing) of current and future training systems in accordance with AFI 17-130 Cybersecurity Program Management, the entire DoDI 8500 series, and the full series of NIST 800 Special Publications in support of 17 TRG at Goodfellow AFB, TX.

Requirements

4+ years’ experience as an ISSO/Alt ISSM
Active TS/SCI government security clearance.
Cybersecurity IAT Level II/IAM level I
Maintains currency of required trainings and certs.
Must possess a valid US passport

Nice To Haves

Bachelor's Degree in Cybersecurity

Responsibilities

Advises the ISSMs on risk levels and security posture.
Maintains awareness of Authorizing Official directed changes affecting the organization's cybersecurity posture.
Collects and maintains artifacts needed to meet system cybersecurity reporting.
Ensures that information system changes are evaluated and implemented as required.
Coordinates cybersecurity inspections, tests, and reviews.
Ensures that new and revised security requirements are integrated into continuity plans.
Evaluates development efforts to ensure that baseline security safeguards are appropriately installed.
Identifies information technology (IT) security program implications of new technologies or technology upgrades.
Manages the monitoring of information security data sources to maintain organizational situational awareness.
Executes the privileged account access review and authorization program.
Accomplishes information security risk assessments.
Provides inputs for the development and/or modification of cybersecurity policies and procedures.
Recognizes security violations and implements the incident response plan.
Opens trouble tickets when a vulnerability is discovered.
Reviews audit logs and communicate items of concern to the appropriate ISSM(s) on a weekly basis and as directed by an ISSM.
Communicates security issues from the change management process to relevant personnel.
Identifies security requirements specific to an information technology (IT) system in all phases of the system life cycle.
Generates plans of actions and milestones, and ensure remediation plans are valid and executable for deficiencies identified during risk assessments, audits, inspections, etc.
Reviews trouble tickets and closes tickets after validating appropriate fix actions have been completed.
Ensures ongoing tickets are assigned to appropriate personnel.
Authorizes standard user accounts following appropriate guidance.
Reviews DISA Intelligence Community Vulnerability Management (ICVM) updates.
Downloads and updates Assured Compliance and Assessment Solution (ACAS) feeds and plugins, when required.
Generates reports and open trouble tickets for new findings.
Performs hardware and software inventory scans and uploads findings to appropriate sharepoint or file share, on a monthly basis and as directed by an ISSM per the SOPs.
Performs security control assessments, and generates and uploads artifacts into eMASS and Xacta, under ISSM direction.
Performs other related duties, as required.