Information Systems Security Officer (ISSO) [DAISSO10]

Air Combat Effectiveness Consulting•Lexington Park, MD

1d•Remote

About The Position

ACE Consulting Group, LLC is seeking a part-time Information Systems Security Officer (ISSO). The position will require between 60-80 hours per month with travel 3 days per quarter and is ideal for a candidate seeking exciting system security work that is less than full time. The ISSO is responsible for maintaining the confidentiality, integrity, and availability of a classified computing environment by designing, integrating, and promoting security features, products, and procedures to ensure operational system authorization and accreditation within the Risk Management Framework (RMF) and associated policy, procedures and guidelines.

Requirements

Active Secret clearance (or current Tier 3 investigation)
10 years of experience performing IS security and administration functions
5 years of experience performing in an ISSO/ISSM position or role
Must currently have a CompTIA Security+ certification
Must currently have or be able to obtain DoD IAM Level 2 within 6 months of start date
Experience with Windows 11 and Linux systems administration
Working knowledge of Microsoft Office (Word, PowerPoint, and Excel)

Responsibilities

Ensuring systems are operated, maintained, and disposed of in accordance with security policies and procedures as outlined in the security plan.
Executing the continuous monitoring strategy.
Ensuring user activity monitoring data is analyzed, stored, and protected in accordance with policies and procedures.
Verifying the implementation of delegated aspects of the system security program.
Ensuring all proper account management documentation is completed prior to adding and deleting system accounts.
Verifying all system security documentation is current and accessible to properly authorized individuals.
Conducting periodic assessments of authorized systems and providing the ISSM with corrective actions for all identified findings and vulnerabilities.
Ensuring audit records are collected and analyzed in accordance with the security plan.
Reporting all security-related incidents to the ISSM.
Monitoring system recovery processes to ensure security features and procedures are properly restored and functioning correctly.
Serving as a member of the Configuration Control Board (CCB), if designated by the ISSM.
Completion of the required ISSM training within 6 months of appointment.