Information Systems Security Officer (ISSO) III

Abacus Technology•Montgomery, AL

About The Position

Abacus Technology is seeking an Information Systems Security Officer (ISSO) to provide security and information assurance support for the Air Force Intranet Control (AFINC) III Support program at Maxwell AFB/Gunter Annex. This is a full-time position. The ISSO supports security and information assurance across program systems by implementing and maintaining Risk Management Framework (RMF) processes, authorizations, security assessments, continuous monitoring, and corrective actions. The role also manages an assigned team, coordinates audits and incident response, and prepares technical reports and briefings.

Requirements

At least 5 years of experience in a cybersecurity or information assurance role, including at least 3 years supporting the RMF.
High school diploma or GED.
Hold at least one of the following IAM II certifications: CISM, CISSO, CISSP, CISSP-ISSMP, FITSP-M, GCIA, GCIH, GCSA, GICSP, and/or GSLC.
Hold the CAP or Certified in Governance, Risk, and Compliance (CGRC) certification.
Participated in training for DISA ACAS Supervisor and Operator and DISA Enterprise Mission Assurance Support Service (eMASS).
Experience with DoD cybersecurity policies and implementation of the RMF, such as NIST SP 800 series and CNSSI 1253.
Experience as an ISSO or ISSM supporting classified programs.
Experience assessing and documenting test or analysis data to demonstrate cybersecurity compliance.
Experience using security-relevant tools, systems, and applications in support of RMF, including NESSUS, ACAS, DISA STIGs, Audit Tools, ESS, eMASS, and PPS.
Outstanding communication skills across all levels of the organization.
Must be a U.S. citizen and hold a current Top Secret clearance with SCI Access (TS/SCI).
Must meet eligibility requirements for access to classified information and be subject to a U.S. government security investigation.

Nice To Haves

Additional certifications such as CCNA or Microsoft Certified: Information Security Administrator Associate.

Responsibilities

Perform security analysis of operational and development environments, threats, vulnerabilities, and internal interfaces to assess compliance with industry and government standards.
Implement Assessment and Authorization (A&A) processes under the Risk Management Framework (RMF) for new and existing information systems.
Maintain current authorizations to operate (ATO) and approvals to connect (ATC), if required, and implement corrective actions identified in plans of action and milestones.
Facilitate development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA), and Risk Acceptance Letters.
Develop an Information System Continuous Monitoring (ISCM) strategy and monitor proposed or actual system and environmental changes to maintain compliance.
Audit systems to ensure security posture integrity.
Conduct assessments and test or analyze data to document compliance with security requirements.
Conduct risk assessments and investigations, recommend risk mitigations, and coordinate incident response activities.
Conduct periodic hardware and software inventory assessments.
Supervise development and deployment of program information security for all program systems to meet program and enterprise requirements, policies, standards, guidelines, and procedures.
Manage an assigned team to facilitate effective execution of the RMF.
Coordinate and participate in security assessments and audits.
Prepare, review, and present technical reports and briefings.
Register, maintain, verify, submit exceptions for, conduct annual reviews of, or decommission systems ports, protocols, and services (PPS) as necessary to ensure compliance with the DoD PPS Category Assurance List (CAL) and DoD PPS Vulnerability Assessment reports.