Information Systems Security Officer III (ISSO III)

SYSTEM HIGH CORPORATION•Bedford, MA

2d•$129,000 - $155,000•Onsite

About The Position

System High Corporation, a recognized leader in national security solutions, is seeking an Information Systems Security Manager (ISSM) II to join their team. This role is crucial for maintaining the appropriate operational security posture for information systems, working closely with the ISSM and ISO. The ISSO will manage the security aspects of an information system, overseeing day-to-day security operations, including physical and environmental protection, personnel security, incident handling, and security training. Responsibilities include developing and updating authorization documentation, managing configuration changes, assessing security impacts, and making recommendations to the ISSM. The primary focus is on Special Access Programs (SAPs) supporting Department of Defense (DoD) agencies, providing day-to-day support for Collateral, SCI, and SAP activities.

Requirements

5 - 7 years related experience
Prior performance in roles such as System, Network Administrator or ISSO
Bachelor’s degree OR Associate’s degree in a related area + 2 years’ experience OR equivalent experience (4 years)
Must meet position and certification requirements outlined in DoD Directive 8570.01-M for Information Assurance Technician Level II or Information Assurance Manager II within 6 months of the date of hire.
Current Top Secret Clearance with SCI Eligibility
Eligibility for access to Special Access Program Information
Willingness to submit to a Counterintelligence polygraph
Must be able to regularly lift up to 50 lbs.

Responsibilities

Develop physical or logical topologies for a system
Assist the ISSM in meeting their duties and responsibilities
Prepare, review, and update authorization packages
Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media
Conduct periodic reviews of information systems to ensure compliance with the security authorization package
Coordinate any changes or modifications to hardware, software, or firmware of a system with the ISSM and AO/DAO prior to the change
Monitor system recovery processes to ensure security features and procedures are properly restored and functioning correctly
Ensure all IS security-related documentation is current and accessible to properly authorized individuals
Ensure audit records are collected, reviewed, and documented (to include any anomalies)
Attend required technical and security training (e.g., operating system, networking, security management) relative to assigned duties
Execute the cyber security portion of the self-inspection, to include provide security coordination and review of all system assessment plans
Identify cyber security vulnerabilities and assist with the implementation of the countermeasures for them
Prepare reports on the status of security safeguards applied to computer systems
Perform ISSO duties in support of in-house and external customers
Conduct security impact analysis activities and provide to the ISSM on all configuration management changes to the authorization boundaries
Conduct continuous monitoring activities for authorization boundaries under your preview
Assist Department of Defense, National Agency and Contractor organizations with all RMF efforts