Information Systems Security Officer II (ISSO II)

System High Corporation•Midwest City, OK

About The Position

The Information Systems Security Officer (ISSO) II helps maintain the operational security posture of information systems and works closely with the Information Systems Security Manager (ISSM) and Information System Owner (ISO). The role requires detailed knowledge of information-system security and may include responsibility for day-to-day security operations, including physical and environmental protection, personnel security, incident handling, and security training and awareness. The ISSO monitors information systems and their operating environments, develops and updates authorization documentation, implements configuration management across authorization boundaries, assesses the security impacts of changes, and makes recommendations to the ISSM. The primary function is supporting Department of Defense agencies and military compartment efforts within Special Access Programs (SAPs), providing day-to-day support for Collateral, Sensitive Compartmented Information (SCI), and SAP activities. The position requires a current TS clearance, SCI eligibility, SAP access eligibility, and willingness to submit to a counterintelligence polygraph.

Requirements

2–5 years of related experience.
Prior experience in a role such as System Administrator, Network Administrator, or ISSO.
Bachelor’s degree or equivalent experience (4 years).
Meet DoD Directive 8570.01-M certification requirements for Information Assurance Technician Level II or Information Assurance Manager II within 6 months of hire.
Current Top Secret clearance with SCI eligibility.
Eligibility for access to Special Access Program information.
Willingness to submit to a Counterintelligence polygraph.
Ability to regularly lift up to 50 lbs.

Responsibilities

Assist the ISSM in meeting duties and responsibilities.
Prepare, review, and update authorization packages.
Ensure approved procedures are in place for clearing, sanitizing, and destroying hardware and media.
Notify the ISSM of changes that might affect an information system’s authorization determination.
Conduct periodic reviews of information systems for compliance with the security authorization package.
Coordinate hardware, software, or firmware changes with the ISSM and AO/DAO before implementation.
Monitor system recovery processes to ensure security features and procedures are restored and functioning correctly.
Keep information-system security documentation current and accessible to properly authorized individuals.
Ensure audit records are collected, reviewed, and documented, including anomalies.
Attend technical and security training relevant to assigned duties.
Execute the cybersecurity portion of the self-inspection and provide security coordination and review of system assessment plans.
Identify cybersecurity vulnerabilities and assist in implementing countermeasures.
Prepare reports on the status of security safeguards applied to computer systems.
Perform ISSO duties supporting in-house and external customers.
Conduct security impact analysis for configuration-management changes to authorization boundaries and provide the analysis to the ISSM.