Information Systems Security Officer (ISSO) - Cleared

$105,353 - $179,101/Yr

ICF International

Full-time - Mid Level

5,001-10,000 employees

Administrative and Support Services

About the position

The Information System Security Officer (ISSO) at ICF will be responsible for maintaining the operational security posture of information systems across multiple security domains and classifications. This role involves ensuring compliance with various cybersecurity regulations and policies, providing guidance to vendors, and overseeing the implementation of security measures. The ISSO will also prepare and maintain necessary documentation for system accreditation and risk management, while actively managing the cybersecurity posture of assigned systems.

Responsibilities

• Perform all ISSO duties and responsibilities in accordance with DODI 8500.01, DODI 8510.01, and AR 25-2.
• Ensure the operational security posture is maintained for information systems on multiple security domains.
• Provide guidance and oversight to vendors regarding cybersecurity compliance.
• Develop, review, evaluate, and verify self-testing results to validate enclave security requirements.
• Maintain organizational situational awareness and initiate actions to improve or restore cybersecurity posture.
• Implement and enforce cybersecurity policies and procedures for Army information systems.
• Prepare, distribute, and maintain plans, instructions, and SOPs concerning system security.
• Prepare and maintain Risk Management Framework (RMF) system accreditation Body of Evidence (BOE) packages using eMASS, XACTA, or other approved A&A tools.
• Review unit or product vendor RMF BOE and provide guidance and oversight.
• Understand DISA Port Protocol and Services Management (PPSM) requirements.

Requirements

• Bachelor's Degree in a relevant field.
• 7 years of experience in information security or related field.
• Active High Level security clearance with SCI and Poly.
• DoDI 8570.01 Requirement, IAM II certification.

Nice-to-haves

• Direct experience with implementation of DOD-I-8500, DOD-I-8510, ICD 503, NIST 800-53, CNSSI 1253, Army AR 25-2, and RMF security control requirements.
• Experience in computer or information systems design/development.
• Familiarity with information assurance and accreditation processes.

Benefits

• Competitive salary based on experience and qualifications.
• Comprehensive health insurance coverage.
• 401(k) retirement savings plan with company matching contributions.
• Paid time off and holidays.
• Professional development opportunities.