Information System Security Officer (ISSO)

OMNI Consulting Solutions•Chantilly, VA

2d•Onsite

About The Position

OMNI Consulting Solutions is seeking an Information System Security Officer (ISSO) to execute day-to-day cybersecurity activities in support of the ISSM. This role involves system audits, user account reviews, security monitoring, compliance tracking, and documentation maintenance. The ISSO will be responsible for executing cybersecurity operations for assigned information systems, conducting system audits, log reviews, and user account/access reviews for compliance with security policy. The role also includes monitoring system security posture, supporting continuous monitoring and vulnerability scanning, maintaining system security documentation (SSPs, POA&Ms, configuration records), and supporting RMF assessment and authorization activities. The ISSO will track and report security-relevant events, incidents, and compliance findings, support account provisioning/de-provisioning and access control administration, and assist with security awareness training and enforcement of system security procedures.

Requirements

Bachelor's degree in a technical field (Computer Science, Information Technology, Cybersecurity, or related) or equivalent experience.
Active TS/SCI clearance.
Experience (10+ years) in cybersecurity/information assurance or systems security administration.
DoD 8570/8140 IAT/IAM Level II certification (e.g., Security+, CySA+, CISSP-Associate, or equivalent).
Working knowledge of RMF processes and system audit/monitoring procedures.
Familiarity with system hardening and access control administration on classified networks.

Nice To Haves

CI polygraph.
Experience with eMASS, ACAS, and/or HBSS/ESS tools.
Prior ISSO experience on IC or USSF/DoD programs.

Responsibilities

Execute day-to-day cybersecurity operations for assigned information systems in support of the ISSM.
Conduct system audits, log reviews, and user account/access reviews for compliance with security policy.
Monitor system security posture and support continuous monitoring and vulnerability scanning activities.
Maintain and update system security documentation, including SSPs, POA&Ms, and configuration records.
Support RMF assessment and authorization activities, including evidence collection for control implementation.
Track and report security-relevant events, incidents, and compliance findings to the ISSM.
Support account provisioning/de-provisioning and access control administration.
Assist with security awareness training and enforcement of system security procedures for end users.