Information Systems Security Officer (ISSO)

The Information Systems Security Officer (ISSO) is responsible for ensuring the appropriate operational security posture is maintained for an information system.

Key Responsibilities:

• Assist the ISSM in meeting their duties and responsibilities
• Prepare, review, and update authorization packages
• Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media
• Notify ISSM when changes occur that might affect the authorization determination of the information system(s)
• Conduct periodic reviews of information systems to ensure compliance with the security authorization package
• Coordinate any changes or modifications to hardware, software, or firmware of a system with the ISSM and AO/DAO prior to the change
• Monitor system recovery processes to ensure security features and procedures are properly restored and functioning correctly
• Ensure all IS security-related documentation is current and accessible to properly authorized individuals
• Ensure audit records are collected, reviewed, and documented (to include any anomalies)
• Attend required technical and security training (e.g., operating system, networking, security management) relative to assigned duties
• Execute the cyber security portion of the self-inspection, to include provide security coordination and review of all system assessment plans
• Identify cyber security vulnerabilities and assist with the implementation of the countermeasures for them
• Prepare reports on the status of security safeguards applied to computer systems
• Perform ISSO duties in support of in-house and external customers
• Conduct security impact analysis activities and provide to the ISSM on all configuration management changes to the authorization boundaries

Requirements:

• 2+ years related experience
• SAP experience required
• Prior performance in roles such as System, Network Administrator, or ISSO
• Bachelor’s degree OR Associate’s degree in a related area + 2 years’ experience OR equivalent experience (4 years)
• IAT Level II or IAM Level II - within 6 months of hire (Security+ CE, CCNA Security, etc.)
• TS/SCI required
• Must be able to Attain – TS/SCI with CI Polygraph
• Must be able to regularly lift up to 50lbs