Information Systems Security Officer (ISSO) III

General Dynamics Information Technology•Ogden, UT

10d•Onsite

About The Position

The Information Systems Security Officer (ISSO) is responsible for maintaining the appropriate operational security posture of information systems, working closely with the ISSM and ISO. The role requires detailed knowledge and expertise in information-system security management and may be responsible for day-to-day security operations, including physical and environmental protection, personnel security, incident handling, and security training and awareness. The ISSO monitors information systems and their operating environments, develops and updates authorization documentation, implements configuration management across authorization boundaries, assesses the security impact of changes, and makes recommendations to the ISSM. The position primarily supports Department of Defense agencies and Special Access Programs (SAPs), providing day-to-day support for Collateral, SCI, and SAP activities. The role is onsite in Ogden, Utah, requires a current TS/SCI clearance, and requires prior SAP access. The employee must be able to attain TS/SCI with CI polygraph.

Requirements

At least 5 years of related experience.
At least 2 years of SAP experience.
Prior performance in a role such as System Administrator, Network Administrator, or ISSO.
U.S. citizenship required.
Current Top Secret/SCI clearance required; must be able to attain TS/SCI with CI polygraph.
Must have been read into a SAP in a current or prior role.
Bachelor’s degree, or an associate degree in a related area plus 2 years of experience, or equivalent experience (4 years).
IAT Level II certification (such as Security+ CE or CCNA Security) or IAM Level II certification, required within 6 months of hire.

Responsibilities

Assist the ISSM in meeting duties and responsibilities.
Prepare, review, and update authorization packages.
Ensure approved procedures are in place for clearing, sanitizing, and destroying hardware and media.
Notify the ISSM of changes that could affect an information system’s authorization determination.
Conduct periodic information-system reviews to ensure compliance with the security authorization package.
Coordinate hardware, software, and firmware changes with the ISSM and AO/DAO before implementation.
Monitor system recovery processes to ensure security features and procedures are restored and functioning correctly.
Keep information-system security documentation current and accessible to properly authorized individuals.
Ensure audit records are collected, reviewed, and documented, including anomalies.
Attend technical and security training relevant to assigned duties.
Execute the cybersecurity portion of self-inspections, including security coordination and review of system assessment plans.
Identify cybersecurity vulnerabilities and assist in implementing countermeasures.
Prepare reports on the status of security safeguards applied to computer systems.
Perform ISSO duties in support of in-house and external customers.
Conduct continuous monitoring activities for assigned authorization boundaries.
Assist Department of Defense, National Agency, and contractor organizations with assessment and authorization efforts.