Information Systems Security Officer III (ISSO III)

System High Corporation•Bedford, MA

11d

About The Position

The Information Systems Security Officer (ISSO) is responsible for maintaining the appropriate operational security posture of an information system, working closely with the ISSM and ISO. The role requires detailed knowledge of information-system security and may include responsibility for day-to-day system security operations, physical and environmental protection, personnel security, incident handling, and security training and awareness. The ISSO monitors information systems and their operating environments, develops and updates authorization documentation, implements configuration management across authorization boundaries, assesses the security impacts of changes, and makes recommendations to the ISSM. The position supports Department of Defense agency missions and Special Access Programs (SAPs), including efforts associated with HQ Air Force, the Office of the Secretary of Defense, and Military Departments. It provides day-to-day support for Collateral, SCI, and SAP activities and assists DoD, National Agency, and contractor organizations with Risk Management Framework (RMF) efforts. The posting requires a current Top Secret clearance with SCI eligibility, eligibility for SAP access, and willingness to submit to a counterintelligence polygraph. The role also requires regularly lifting up to 50 pounds.

Requirements

Current Top Secret clearance with SCI eligibility.
Eligibility for access to Special Access Program information.
Willingness to submit to a counterintelligence polygraph.
Five to seven years of related experience.
Prior performance in roles such as System Administrator, Network Administrator, or ISSO.
Bachelor’s degree, or an associate degree in a related area plus two years of experience, or equivalent experience (four years).
Meet DoD Directive 8570.01-M position and certification requirements for Information Assurance Technician Level II or Information Assurance Manager II within six months of hire.
Ability to regularly lift up to 50 pounds.
The description states that the position requires a minimum of two years of Special Access Program experience.

Responsibilities

Develop physical or logical system topologies.
Assist the ISSM in carrying out duties and responsibilities.
Prepare, review, and update authorization packages.
Ensure approved procedures are in place for clearing, sanitizing, and destroying hardware and media.
Conduct periodic reviews of information systems for compliance with the security authorization package.
Coordinate system hardware, software, and firmware changes with the ISSM and AO/DAO before changes are made.
Monitor system recovery processes to ensure security features and procedures are properly restored and functioning.
Keep IS security-related documentation current and accessible to authorized individuals.
Ensure audit records are collected, reviewed, and documented, including anomalies.
Attend technical and security training relevant to assigned duties.
Execute the cybersecurity portion of self-inspections and provide security coordination and review of system assessment plans.
Identify cybersecurity vulnerabilities and assist in implementing countermeasures.
Prepare reports on the status of security safeguards applied to computer systems.
Perform ISSO duties in support of internal and external customers.
Conduct security impact analyses of configuration management changes to authorization boundaries and provide results to the ISSM.
Conduct continuous monitoring for assigned authorization boundaries.
Assist Department of Defense, National Agency, and contractor organizations with RMF efforts.