Information Systems Security Officer

ISYS Technologies•Fairbanks, AK

2d•Onsite

About The Position

I2X Technologies is a reputable technology services company to the Federal Government. Whether the focus is on space exploration, national security, cyber security, or cutting-edge engineering applications, I2X is ready to offer you the chance to make a real-world impact in your field and for your country. We provide long-term growth and development. Headquartered in Colorado, I2X is engaged in programs across the country and in more than 20 states. Our programs support multiple Federal agencies, including the Department of Defense. We are seeking an Information Systems Security Officer to support our customer’s operations in Fairbanks, Alaska. This effort provides our Government customer with satellite mission data technical and administrative support services. This position will be on-site and will require an active Secret Clearance.

Requirements

A Bachelor’s degree from an accredited college or university.
Must possess and maintain an appropriate professional cybersecurity certification, such as Certified Information Systems Security Professional (CISSP), consistent with CITR-006 requirements.
At least 8 years of progressively responsible cybersecurity, information assurance, information-system security, or risk-management experience.
At least 5 years of experience supporting federal or similarly regulated information systems subject to FISMA, NIST security controls, Department of Commerce requirements, or comparable cybersecurity frameworks.
At least 3 years of experience serving as an ISSO, Information System Security Manager, cybersecurity compliance lead, or equivalent security official.
At least 3 years of experience developing and maintaining System Security Plans, authorization packages, security-control documentation, contingency documentation, and supporting security artifacts.
At least 3 years of experience using CSAM or a comparable governance, risk, compliance, and authorization-management system.
At least 3 years of experience creating, monitoring, updating, and closing POA&Ms and coordinating vulnerability mitigation with system owners, administrators, engineers, and operational personnel.
At least 3 years of experience planning and documenting continuous monitoring, vulnerability scanning, patch management, configuration compliance, or security-control testing.
At least 3 years of experience conducting security-impact assessments for hardware, software, network, configuration, or operational changes.
At least 2 years of experience supporting cybersecurity incident investigation or coordinating with an agency incident-response organization.
Must meet CITR-006 training requirements and continuing-education requirements established by the applicable certification organization.
Must be able to obtain and maintain the Department of Commerce suitability determination required for key personnel.
US Citizenship
Active Secret Clearance

Nice To Haves

Experience securing systems supporting satellite operations, mission systems, operational technology, building controls, physical-security systems, or critical infrastructure is preferred.

Responsibilities

Serve as the principal information-security advisor to the System Owner for assigned FCDAS networks and information systems.
Develop, monitor, and enforce compliance with OSPO, NOAA, Department of Commerce, federal, and FISMA information-security requirements.
Coordinate development and maintenance of System Security Plans and supporting documentation for the FCDAS Administrative LAN, COSMIC satellite network, and other assigned systems.
Maintain the security authorization package in the Cyber Security Assessment and Management system.
Develop, monitor, update, and report plans of action and milestones, mitigation activities, corrective actions, and vulnerability status.
Plan, execute, and document continuous-monitoring activities, vulnerability scanning, configuration reviews, patching, control assessments, and cybersecurity reporting.
Manage day-to-day security operations and assist System Owners in developing and enforcing information-system security policies.
Assess the security impact of proposed hardware, software, network, configuration, and operational changes.
Coordinate secure-configuration implementation and testing while ensuring changes do not adversely affect satellite operations.
Support investigation of unusual or unauthorized activity and coordinate with administrators, System Owners, NOAA OCIO, and the NOAA Computer Incident Response Team.
Prepare security documentation, evidence, artifacts, reports, and technical information for authorization, accreditation, audits, assessments, and incident response.
Respond to short-notice cybersecurity data calls and ensure security deficiencies are communicated and corrected.
The PWS assigns the ISSO responsibility for SSPs, CSAM authorization records, POA&Ms, continuous monitoring, day-to-day security operations, change control, and security-impact assessments.