Information Systems Security Officer

True Anomaly•Denver, CO

35d•$80,000 - $150,000•Onsite

About The Position

The Information Systems Security Officer (ISSO) will oversee the security posture of all classified information systems and develop/revise necessary Risk Management Framework (RMF) documentation to support system authorization. The role reports to the Vice President of Facilities and Government Security and will be onsite in our Denver, CO office.

Requirements

5-11 years of relevant work experience.
U.S. Citizen and eligible for DoD Secret or TS/SCI clearance.

Nice To Haves

Current active DoD TS/SCI clearance.

Responsibilities

Build and update standard RMF packages, including the Systems Security Plam (SSP), Plan of Actions and Milestones (POAMs), Security Control Traceability Matrix (SCTM), hardware and software inventories, and network topology diagrams.
Lead the development and implementation of security policies and procedures required by assessment and authorization activities in accordance with ICD-503, DAAPM, NISPOM, JSIG, and NIST 800-53.
Program guidance and direction to program personnel, ensuring effective communication within the roles.
Collaborate with System Administrators and Network Engineers to ensure timely application of security patches and secure configurations in line with Security Technical Implementation Guidelines (STIGs).
Assist with information system security management and day-to-day security operations.
Serve as a member of the Change Control Board (CCB) to ensure configuration management for Cybersecurity-relevant software, hardware, and firmware is maintained and documented.
Ensure all personnel receive the necessary technical and security training to perform their duties effectively.
Conduct security reviews of proposed changes or additions to the information system (including hardware or software) and advise the Information System Security Manager (ISSM) on security relevance.
Perform vulnerability/risk assessment analysis to support continuous monitoring and the certification and accreditation process.