Information Systems Security Officer (ISSO)

Science and Engineering Services, LLC•Huntsville, AL

1d•Onsite

About The Position

The Information Systems Security Officer (ISSO) will be responsible for reviewing, implementing, updating and documenting ESTS lab’s information, security policies and procedures, managing security audits, vulnerability and threat assessments, directing responses for system intrusions, and ensuring fulfillment of legal and contractual information security and privacy mandates, preventing and detecting intrusion.

Requirements

High School Diploma or GED required
Three years of relevant work experience as a Security Analyst to include; developing, editing, and auditing cyber security policies, plans, and procedures for government systems and programs
Knowledge and experience working with NIST security controls and regulations required
Experience conducting vulnerability audits, security configuration checks, and system configuration scans to meet Cyber Security requirements required
Any combination of education/experience may be substituted for job requirements at the recommendation of the hiring manager and approval of the COO or higher.

Nice To Haves

Bachelor’s Degree preferred

Responsibilities

Demonstrate a strong knowledge of cybersecurity principles and DoD requirements relevant to the confidentiality, integrity, availability and authentication of systems operating in a classified environment
Ensure compliance with the Chapter 8 regulatory requirements of the with National Industrial Security Program Operating Manual (NISPOM)
Applies current computer science technologies to the development, evaluation, and integration of computer systems and networks to maintain system security for classified information systems. Primary liaison to the local Defense Counterintelligence and Security Agency (DCSA) Information Systems Security Professional (ISSP) on all matters pertaining to classified information systems
Propose, coordinate, implement, and enforce information systems security policies, standards, and methodologies
Support the development and maintenance of technical documentation and standard operating procedures (SOPs)
Execute the security assessment and authorization process for Risk Management Framework (RMF) requirements
Support the Security Manager with site accreditation/reaccreditation process
Perform updates to Risk Management Framework accreditation documentation for assigned systems
Prepare and submit classified spillages/incident responses
Performs other duties as assigned