ISSO - DOD

INNOVIM•Colorado Springs, CO

8h•$110,000 - $120,000•Onsite

About The Position

INNOVIM is seeking an ISSO to support North American Aerospace Defense Command (NORAD) on the Integrated Tactical Warning/Attack Assessment (ITW/AA) and Space Support Contract II (NISSC II). This role is located in the Chidlaw Building, Colorado Springs, CO.

Requirements

Must have an active DOD Secret Clearance
2-5 years practical DoD/USAF information security policy background with practical / hands-on experience applying RMF processes and principles within eMASS and/or Xacta
2-5 years experience developing and/or contributing to RMF body of evidence composition, applicable artifacts, and associated control families
2-5 years experience performing NIST 800-53 Control Assessments
2-5 years experience conducting Security Impact Analysis
Must meet Requirements outlined in DoDM 8140.03 for Information System Security Manager (722)

Nice To Haves

Excellent analytical and problem-solving skills are crucial to conduct continuous assessments of network security measures and identify possible risks and provide risk prevention and mitigation.
Experience with cybersecurity policies and implementation of Risk Management Framework (RMF): e.g., DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series
Experience in utilizing security-relevant tools such as ACAS, ESS, SCAP

Responsibilities

Perform security analysis of operational and development environments, threats, vulnerabilities, and internal interfaces to define and assess compliance with accepted industry and government standards
Support the Assessment and Authorization (A&A) processes under NIST Risk Management Framework (RMF) for new and existing information systems
Experience entering information in the Enterprise Mission Assurance Support Services (eMASS) or Xacta.
Coordinates auditing systems to ensure security posture integrity
Support assessments and test/analysis data to document the state of compliance with security requirements
Conducts periodic hardware/software inventory assessments
Collaborate with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements.