Information Systems Security Officer (ISSO) II

General Dynamics Information Technology•Boston, MA

4d•Onsite

About The Position

The Information Systems Security Officer (ISSO) is responsible for maintaining the appropriate operational security posture of information systems and works closely with the ISSM and ISO. The role requires detailed knowledge and expertise in managing information system security, including day-to-day security operations, physical and environmental protection, personnel security, incident handling, and security training and awareness. The ISSO monitors systems and their operating environments, develops and updates authorization documentation, and implements configuration management across authorization boundaries, assessing security impacts and making recommendations to the ISSM. The position provides day-to-day support for Collateral, Sensitive Compartmented Information (SCI), and Special Access Program (SAP) activities. It supports in-house and external customers and includes executing cybersecurity self-inspection activities, identifying vulnerabilities, supporting countermeasures, and reporting on security safeguards. The role is onsite in Massachusetts, with 40 scheduled weekly hours and 10–25% travel required.

Requirements

At least 2 years of related experience.
Special Access Program (SAP) experience.
Prior performance in roles such as System Administrator, Network Administrator, or ISSO.
Bachelor’s degree, or an associate degree in a related area plus 2 years of experience, or equivalent experience (4 years).
IAT Level II or IAM Level II certification, such as Security+ CE or CCNA Security.
Must be a U.S. citizen.
Must currently possess a Top Secret/SCI clearance and be able to attain TS/SCI with CI Polygraph.

Responsibilities

Assist the ISSM in meeting their duties and responsibilities.
Prepare, review, and update authorization packages.
Ensure approved procedures are in place for clearing, sanitizing, and destroying hardware and media.
Notify the ISSM of changes that might affect information system authorization determinations.
Conduct periodic reviews of information systems to verify compliance with the security authorization package.
Coordinate hardware, software, or firmware changes with the ISSM and AO/DAO before changes are made.
Monitor system recovery processes to ensure security features and procedures are properly restored and functioning.
Ensure information system security documentation is current and accessible to authorized individuals.
Ensure audit records are collected, reviewed, and documented, including anomalies.
Attend technical and security training relevant to assigned duties.
Execute the cybersecurity portion of self-inspection, including security coordination and review of system assessment plans.
Identify cybersecurity vulnerabilities and assist with implementing countermeasures.
Prepare reports on the status of security safeguards applied to computer systems.
Perform ISSO duties in support of in-house and external customers.
Conduct security impact analyses for configuration management changes to authorization boundaries and provide the results to the ISSM.