Information Systems Security Officer

Yulista Solutions • Huntsville, AL

9h

About The Position

StraitSys is seeking an Information Systems Security Officer. In this role, you will be responsible for maintaining the security posture of Army’s IT systems by managing security controls, conducting risk assessments, ensuring compliance with regulations, overseeing authorization packages, monitoring vulnerabilities, and responding to incidents to protect confidentiality, integrity, and availability of data. Key duties involve developing security plans, performing continuous monitoring, managing POA&Ms (Plans of Action & Milestones), and collaborating with stakeholders to build a strong security culture.

Requirements

• Must be a US Citizen.
• Active Secret Clearance
• Greater than one-year minimum practical experience as an ISSO familiar with eMASS, ACAS/ Nessus scans, applying STIGs, etc.
• Familiarity with cybersecurity and IT security matters, including documentation requirements and security control implementation.
• Ability to successfully pass a pre-employment drug test.
• Must be a self-starter who does not shy away from challenges and hard work
• Ability to lead an Army program to meet all documentation, artifact, and eMASS cyber security management requirements to achieve an Authority to Operate (ATO) for an Army tactical system
• Skilled in providing technical support in the areas of vulnerability assessment, risk assessment, network security, product evaluation, and security implementation.
• Versed in design of information system contingency plans and other deliverables which maintain appropriate levels of protection and meet time requirements for minimizing operations impact to customer organization as well as Security Authorization and Assessment (A&A processes).
• Strong writing skills to develop and maintain System Security Plans (SSP), Contingency Plans, Privacy Impact Assessments, Certification Reports, Accreditation Reports, Plan of Action & Milestones (POA&M), and other C&A documentation.
• Demonstrates oral and written communication skills to work closely with all levels of personnel involved in IT operations and technical aspects of systems.
• Familiarity with security policies & guidance documents to assist with the preparation and maintenance of process artifacts and traceability documents purposed for compliance with Authority to Operate (ATO) requirements.

Nice To Haves

• Familiarity and/or previous experience with a tactical Army systems

Responsibilities

• Supports all aspects of Risk Management Framework(RMF) processes tailored to include minimum cybersecurity standards and demonstrate competency with specific experience in Cyber Security, Engineering, Test & Evaluation, (T&E) and/or Security Control Assessor (SCA) under a Certification & Accreditation (C&A) and/or Assessment & Authorization (A&A) process.
• Function as a representative for cybersecurity matters, including reporting requirements, data calls, Army CIO requirements, as well as legal and compliance matters relating to IT security.
• Design, implementation, and support of cybersecurity artifacts.
• Actively participate in IT and security meetings
• Manage the ATO process for Army tactical missile systems and assets, including control implementation and documentation. Comfortable utilizing eMASS to document to meet this goal.
• Conducts testing and audit log reviews to evaluate the effectiveness of current security measures. Directs and implements the necessary controls and procedures to cost-effectively protect information systems assets from intentional or inadvertent modification, disclosure, or destruction.
• Monitors security of electronic data, application system usage, networks, and physical environment.
• The specialist is expected to evaluate security solutions to ensure they meet security requirements for processing up to classified information and supervise and/or maintain the operational security posture for an information system or program.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed
• Number of Employees: 1,001-5,000 employees