Information Systems Security Officer (ISSO)

Abacus Technology•Montgomery, AL

12d

About The Position

Abacus Technology is seeking an Information Systems Security Officer to provide security and information assurance support for the Air Force Intranet Control (AFINC) III Support program at Maxwell AFB/Gunter Annex. This is a full-time position. The role supports the security and compliance of program information systems, including implementation of the Risk Management Framework (RMF), maintaining system authorizations, assessing security posture, and coordinating security activities across the program.

Requirements

At least 3 years of experience in a cybersecurity or information assurance role.
High school diploma or GED.
Hold at least one IAM I certification: Security+, CASP+/SecurityX, CCISO, CCSP, Cloud+, GSEC, and/or SSCP.
Hold the CAP or Certified in Governance, Risk, and Compliance (CGRC) certification.
Have participated in training for DISA ACAS Supervisor and Operator and DISA Enterprise Mission Assurance Support Service (eMASS).
Experience with DoD cybersecurity policies and RMF implementation, such as NIST SP 800 series and CNSSI 1253.
Experience as an ISSO or ISSM supporting classified programs.
Experience assessing and documenting test or analysis data to demonstrate cybersecurity compliance.
Experience using security-relevant tools, systems, and applications supporting RMF, including NESSUS, ACAS, DISA STIGs, Audit Tools, ESS, eMASS, and PPS.
Outstanding communication skills across all levels of the organization.
Must be a U.S. citizen and hold a current Top Secret clearance with SCI access (TS/SCI).
Must meet eligibility requirements for access to classified information and be subject to a U.S. government security investigation.

Responsibilities

Analyze operational and development environments, threats, vulnerabilities, and internal interfaces to assess compliance with industry and government standards.
Implement Assessment and Authorization (A&A) processes under the Risk Management Framework (RMF) for new and existing information systems.
Maintain current authorizations to operate (ATOs) and approvals to connect (ATCs), when required, and implement corrective actions identified in plans of action and milestones.
Facilitate development of Memorandums of Understanding (MOUs), Interconnection Security Agreements (ISAs), and Risk Acceptance Letters.
Develop an Information System Continuous Monitoring (ISCM) strategy and monitor proposed or actual system and environment changes to maintain compliance.
Audit systems to ensure the integrity of their security posture.
Conduct assessments and test or analyze data to document compliance with security requirements.
Conduct risk assessments and investigations, recommend risk mitigations, and coordinate incident response activities.
Conduct periodic hardware and software inventory assessments.
Supervise the development and deployment of program information security for program systems in accordance with program and enterprise requirements, policies, standards, guidelines, and procedures.
Manage an assigned team to support effective execution of RMF and coordinate and participate in security assessments and audits.
Prepare, review, and present technical reports and briefings.
Register, maintain, verify, submit exceptions for, conduct annual reviews of, or decommission systems ports, protocols, and services (PPS) as needed to comply with the DoD PPS Category Assurance List (CAL) and DoD PPS Vulnerability Assessment reports.