Cyber Security, Information Systems Security Officer (ISSO)

BAE Systems•Merrimack, NH

7d•$97,008 - $164,914•Onsite

About The Position

BAE Systems is hiring an Information Systems Security Officer to support and protect information systems critical to national security within Electronic Systems. The role supports adherence to Risk Management Framework (RMF) requirements and standards, including NISPOM/DAAPM, JSIG, ICD 503, STIGs, and associated NIST publications. The ISSO supports the Information System Security Manager (ISSM) in obtaining and maintaining Authority to Operate (ATO) approvals for assigned systems and programs. The position supports cybersecurity efforts throughout the RMF process, including developing and managing system security documentation and Plans of Action and Milestones (POA&Ms), assessing and auditing security controls, and continuously monitoring controls. It also helps keep certification and accreditation documents for classified systems current and verifies that required continuous monitoring is implemented. The position is performed full-time onsite at a BAE Systems facility.

Requirements

Active Top Secret clearance and ability to obtain TS/SCI.
IAM Level I certification commensurate with DoD 8570.1M requirements, or ability to obtain the certification within six months.
High personal motivation and initiative to learn and acquire new skills and adapt to an evolving security environment.
Customer focus, excellent communication skills, and ability to work with limited supervision.
Strong organizational skills.

Nice To Haves

ISSO or relevant cybersecurity experience.
Working knowledge of system functions, security policies, technical security safeguards, and operational security measures.
Experience auditing and certifying compliance of Windows, Linux, network devices, and peripherals.
Experience preparing Assessment and Authorization (A&A) documents and procedures.
Experience developing and delivering IA-related briefings and training materials.
Experience with compliance and vulnerability scanning tools such as Nessus, SCAP, ACAS, and SCC.
Experience reviewing and creating mitigation reports from compliance and vulnerability scanning tools such as Nessus, SCAP, ACAS, and SCC.
Ability to translate operational requirements into technical requirements and architectures needed to meet program objectives.
Experience conducting all aspects of a self-inspection.

Responsibilities

Support compliance with the Risk Management Framework and applicable NISPOM/DAAPM, JSIG, ICD 503, STIG, and NIST requirements.
Support the ISSM in obtaining and maintaining Authority to Operate approvals for assigned systems.
Support cybersecurity activities throughout the RMF process for assigned programs.
Support the development and management of system security documentation and Plans of Action and Milestones (POA&Ms).
Assess and audit system security controls and support continuous monitoring of controls.
Help ensure certification and accreditation documents for classified systems remain up to date.
Ensure continuous monitoring activities are implemented and meet cognizant security authority requirements.
Interface with IA team members, other security disciplines, program personnel, and government security representatives.