ISSO - DOD

INNOVIM•Colorado Springs, CO

8h•Onsite

About The Position

INNOVIM is seeking an ISSO to support North American Aerospace Defense Command (NORAD) on the Integrated Tactical Warning/Attack Assessment (ITW/AA) and Space Support Contract II (NISSC II). This role involves performing security analysis of operational and development environments, identifying threats and vulnerabilities, and ensuring compliance with industry and government standards. The candidate will also support Assessment and Authorization (A&A) processes under the NIST Risk Management Framework (RMF) for both new and existing information systems. Key responsibilities include coordinating auditing systems to maintain security posture integrity, documenting compliance through assessments and test data, conducting periodic hardware/software inventory assessments, and collaborating with government customers, suppliers, and company personnel to implement protective mechanisms and ensure adherence to cybersecurity requirements.

Requirements

Must have a active DOD Secret Clearance
2-5 years practical DoD/USAF information security policy background with practical / hands-on experience applying RMF processes and principles within eMASS and/or Xacta
2-5 years experience developing and/or contributing to RMF body of evidence composition, applicable artifacts, and associated control families
2-5 years experience performing NIST 800-53 Control Assessments
2-5 years experience conducting Security Impact Analysis
Must meet Requirements outlined in DoDM 8140.03 for Information System Security Manager (722)
Experience entering information in the Enterprise Mission Assurance Support Services (eMASS) or Xacta.

Nice To Haves

Excellent analytical and problem-solving skills are crucial to conduct continuous assessments of network security measures and identify possible risks and provide risk prevention and mitigation.
Experience with cybersecurity policies and implementation of Risk Management Framework (RMF): e.g., DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series
Experience in utilizing security-relevant tools such as ACAS, ESS, SCAP

Responsibilities

Perform security analysis of operational and development environments, threats, vulnerabilities, and internal interfaces to define and assess compliance with accepted industry and government standards
Support the Assessment and Authorization (A&A) processes under NIST Risk Management Framework (RMF) for new and existing information systems
Coordinates auditing systems to ensure security posture integrity
Support assessments and test/analysis data to document the state of compliance with security requirements
Conducts periodic hardware/software inventory assessments
Collaborate with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements.