Information Systems Security Officer (ISSO) II

General Dynamics Information Technology•Burlington, MA

5d•$97,240 - $131,560•Onsite

About The Position

The Information Systems Security Officer (ISSO) is responsible for maintaining the appropriate operational security posture of an information system and works closely with the ISSM and ISO. The role requires detailed knowledge and expertise in managing information-system security and may include responsibility for day-to-day security operations. Duties cover physical and environmental protection, personnel security, incident handling, and security training and awareness. The ISSO monitors information systems and their operating environments, develops and updates authorization documentation, implements configuration management across authorization boundaries, assesses security impacts of changes, and makes recommendations to the ISSM. The role provides day-to-day support for Collateral, SCI, and SAP activities. The position is onsite in Massachusetts, with 40 scheduled weekly hours and 10–25% travel required. A Top Secret/SCI clearance is required, and the candidate must be able to attain TS/SCI with CI Poly. The likely salary range is $97,240–$131,560; actual compensation may vary based on experience, location, and contractual requirements.

Requirements

At least 2 years of related experience.
SAP experience required.
Prior performance in a role such as System Administrator, Network Administrator, or ISSO.
Bachelor’s degree, or an associate degree in a related area plus 2 years of experience, or equivalent experience (4 years).
IAT Level II or IAM Level II certification, such as Security+ CE or CCNA Security.
Must currently possess Top Secret/SCI clearance and be able to attain TS/SCI with CI Poly.
U.S. citizenship required.
Skills in information security, information security management, and information system security.

Responsibilities

Assist the ISSM in meeting duties and responsibilities.
Prepare, review, and update authorization packages.
Ensure approved procedures are in place for clearing, sanitizing, and destroying hardware and media.
Notify the ISSM of changes that might affect an information system’s authorization determination.
Conduct periodic information-system reviews to ensure compliance with the security authorization package.
Coordinate proposed hardware, software, and firmware changes with the ISSM and AO/DAO before implementation.
Monitor system recovery processes to ensure security features and procedures are properly restored and functioning.
Keep IS security-related documentation current and accessible to authorized individuals.
Ensure audit records are collected, reviewed, and documented, including anomalies.
Attend technical and security training relevant to assigned duties.
Execute the cybersecurity portion of the self-inspection, including security coordination and review of system assessment plans.
Identify cybersecurity vulnerabilities and assist with implementing countermeasures.
Prepare reports on the status of security safeguards applied to computer systems.
Perform ISSO duties in support of in-house and external customers.
Conduct security impact analyses for configuration-management changes to authorization boundaries and provide the results to the ISSM.