Senior Information System Security Officer (ISSO)

ASEC • Orlando, FL

23h • Onsite

About The Position

As the Senior Information System Security Officer, you will provide support for a program information assurance program. The candidate will provide support for proposing, coordinating, implementing, and enforcing information system security policies, standards, and methodologies. The ideal candidate will have experience working with the Joint Special Access Program Implementation Guide (JSIG).

As the Senior ISSO, you will provide mission-critical support by:
Proposing, coordinating, implementing, and enforcing information system security policies, standards and methodologies.
Performing vulnerability assessments using the Assured Compliance Assessment Solution (ACAS), Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG), and the Security Content Automation Protocol (SCAP) Compliance Checker, incorporating automated Benchmarks.
Implementing operating systems and network devices security configuration in accordance with Defense Information Systems Agency (DISA) approved Security Technical Implementation Guides.
Performing security control continuous monitoring, security audits, risk analysis and developing mitigation strategies for DoD information systems.
Identifying Common Criteria and National Information Assurance Partnership (NIAP) certified technologies and the DISA Approved Products List (APL).
Preparing certification letters and Memoranda of Agreement (MoA) with system owners for interface and networking implementations.

The job description is not intended to be an all-inclusive list of duties and responsibilities. It is intended to describe the general nature of the position.

Requirements

• Bachelor's in Computer Science, Information Systems Management, Engineering, or a related, technical area of study preferred. Without a bachelor's degree, 10 years of experience as an ISSO will be required.
• At least 5 years of experience in the following areas is required: Information Assurance/Cybersecurity (IA/CS)
• Risk Management Framework (RMF) DODI 8510.01
• Security controls and implementation delineated in Committee of National Security Systems Instruction (CNSSI) 1253 and National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53, and the Joint Special Access Program Implementation Guide (JSIG)
• Performing vulnerability assessments using Assured Compliance Assessment Solution (ACAS), Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG), the Security Content Automation Protocol (SCAP) Compliance Checker, incorporating automated Benchmarks
• Implementing operating systems and network devices security configuration in accordance with Defense Information Systems Agency (DISA) approved Security Technical Implementation Guides
• Performing security control continuous monitoring, security audits, risk analysis and developing mitigation strategies for DoD information systems
• Identifying Common Criteria and National Information Assurance Partnership (NIAP) certified technologies and the DISA Approved Products List (APL)
• Knowledge of the Intelligence Community Directive (ICD) 705, DoD 5205.07, and DOD 5205.07-M Volumes 1-4, Special Access Program (SAP) Policy, and the Joint Special Access Program Implementation Guide (JSIG)
• Candidates must hold a current IAM-III certification (i.e. CISM, CISSP, or GSLC) as defined by DoD 8570.01-M. Please upload copies of any relevant IT certifications as part of your application. These documents help us verify qualifications during the initial screening process.
• This position requires U.S. citizenship and an active DoD Top Secret clearance. Selected candidate will be subject to a government security investigation and must meet eligibility requirements for access to classified information.

Nice To Haves

• Ability to build positive, collaborative relationships across teams and with external partners.
• Effective communicator with strong verbal and written skills.
• Proactive, self-directed work style with the ability to operate independently.
• Analytical thinker with proven problem-solving capabilities.
• Highly organized, with the ability to balance competing priorities in a fast-paced environment.

Responsibilities

• Proposing, coordinating, implementing, and enforcing information system security policies, standards and methodologies.
• Performing vulnerability assessments using the Assured Compliance Assessment Solution (ACAS), Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG), and the Security Content Automation Protocol (SCAP) Compliance Checker, incorporating automated Benchmarks.
• Implementing operating systems and network devices security configuration in accordance with Defense Information Systems Agency (DISA) approved Security Technical Implementation Guides.
• Performing security control continuous monitoring, security audits, risk analysis and developing mitigation strategies for DoD information systems.
• Identifying Common Criteria and National Information Assurance Partnership (NIAP) certified technologies and the DISA Approved Products List (APL).
• Preparing certification letters and Memoranda of Agreement (MoA) with system owners for interface and networking implementations.

Benefits

• 100% employee-owned. Learn more about our ESOP plan here!
• Comprehensive benefits package (11 paid holidays, medical/dental/vision insurance, HSA/FSA, disability insurance, and more!)
• 401K match
• Tuition assistance (undergraduate and graduate)
• Veteran friendly
• Thriving employee culture
• Employee discount program

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 251-500 employees