Information Systems Security Officer (ISSO) II

GD Information Technology•Portland, OR

4d•Onsite

About The Position

The Information Systems Security Officer (ISSO) II helps maintain the operational security posture of information systems in close collaboration with the ISSM and ISO. The role manages system security activities and may be responsible for day-to-day security operations, including physical and environmental protection, personnel security, incident handling, and security training and awareness. The ISSO monitors information systems and their operating environments, develops and updates authorization documentation, and implements configuration management across authorization boundaries. The position assesses the security impact of changes and makes recommendations to the ISSM, while providing day-to-day support for Collateral, SCI, and SAP activities. The role supports in-house and external customers and performs security authorization, compliance review, audit, vulnerability, and configuration-change activities. It requires SAP experience and a current TS/SCI clearance; the employee must be able to attain TS/SCI with CI Polygraph. The position is onsite in the USA or Portland, involves 10–25% travel, and is scheduled for 40 hours per week.

Requirements

At least 2 years of related experience.
SAP experience required.
Prior performance in a role such as System Administrator, Network Administrator, or ISSO.
Bachelor’s degree; or an associate degree in a related area plus 2 years of experience; or equivalent experience (4 years).
IAT Level II or IAM Level II certification within 6 months of hire (examples include Security+ CE or CCNA Security).
Must be a U.S. citizen.
Must currently possess a Top Secret/SCI clearance and be able to attain TS/SCI with CI Polygraph.
Must be able to regularly lift up to 50 pounds.

Responsibilities

Assist the ISSM in meeting their duties and responsibilities.
Prepare, review, and update authorization packages.
Ensure approved procedures are in place for clearing, sanitizing, and destroying hardware and media.
Notify the ISSM of changes that might affect information-system authorization determinations.
Conduct periodic information-system reviews to ensure compliance with the security authorization package.
Coordinate hardware, software, and firmware changes with the ISSM and AO/DAO before changes are made.
Monitor system recovery processes to ensure security features and procedures are restored and functioning correctly.
Keep information-system security documentation current and accessible to properly authorized individuals.
Ensure audit records are collected, reviewed, and documented, including anomalies.
Attend technical and security training relevant to assigned duties.
Execute the cybersecurity portion of self-inspections and provide security coordination and review of system assessment plans.
Identify cybersecurity vulnerabilities and assist with implementing countermeasures.
Prepare reports on the status of security safeguards applied to computer systems.
Perform ISSO duties in support of in-house and external customers.
Conduct security impact analysis for configuration-management changes to authorization boundaries and provide the results to the ISSM.