Information Systems Security Officer II (ISSO II)

System High Corporation•Lompoc, CA

About The Position

The Information Systems Security Officer (ISSO) II helps maintain the appropriate operational security posture of information systems, working closely with the ISSM and ISO. The role requires detailed knowledge of information-system security and may include responsibility for day-to-day security operations, physical and environmental protection, personnel security, incident handling, and security training and awareness. The position supports Special Access Programs (SAPs) for Department of Defense agencies, including HQ Air Force, the Office of the Secretary of Defense, and Military Compartments efforts. It provides day-to-day support for Collateral, Sensitive Compartmented Information (SCI), and SAP activities. The ISSO monitors information systems and their operating environments, develops and updates authorization documentation, manages configuration changes across authorization boundaries, assesses security impacts, and makes recommendations to the ISSM. The role requires a current Top Secret clearance with SCI eligibility, eligibility for access to SAP information, and willingness to submit to a Counterintelligence polygraph. The employee must be able to regularly lift up to 50 pounds. The job description notes that duties may include additional activities not listed.

Requirements

2–5 years of related experience.
Prior performance in a role such as System Administrator, Network Administrator, or ISSO.
Bachelor’s degree or equivalent experience (4 years).
Meet DoD Directive 8570.01-M certification requirements for Information Assurance Technician Level II or Information Assurance Manager II within 6 months of hire.
Current Top Secret clearance with SCI eligibility.
Eligibility for access to Special Access Program information.
Willingness to submit to a Counterintelligence polygraph.
Ability to regularly lift up to 50 pounds.
TS/SCI clearance and Special Access Program experience.

Responsibilities

Assist the ISSM in meeting their duties and responsibilities.
Prepare, review, and update authorization packages.
Ensure approved procedures are in place for clearing, sanitizing, and destroying hardware and media.
Notify the ISSM of changes that might affect information-system authorization determinations.
Conduct periodic information-system reviews to ensure compliance with the security authorization package.
Coordinate hardware, software, or firmware changes with the ISSM and AO/DAO before changes are made.
Monitor system recovery processes to ensure security features and procedures are properly restored and functioning.
Keep IS security-related documentation current and accessible to authorized individuals.
Ensure audit records are collected, reviewed, and documented, including anomalies.
Attend technical and security training relevant to assigned duties.
Execute the cybersecurity portion of the self-inspection and provide security coordination and review of system assessment plans.
Identify cybersecurity vulnerabilities and assist with implementing countermeasures.
Prepare reports on the status of security safeguards applied to computer systems.
Perform ISSO duties in support of in-house and external customers.
Conduct security impact analyses for configuration management changes to authorization boundaries and provide the results to the ISSM.
Monitor information systems and their environments of operation in coordination with the ISSM and ISO.
Implement configuration management across authorization boundaries and assess the security impact of changes.