Information Systems Security Officer (ISSO)

Title:

Information Systems Security Officer (ISSO)

KBR — Delivering Solutions, Changing the World.

KBR brings together the best and brightest to deliver science, technology and engineering solutions that help governments and companies around the world accomplish their most critical missions and objectives.

In everything we do, we are guided by our ONE KBR Values:

• We Value Our People – We create diverse, inclusive environments in which each person can feel safe, respected and valued, and where everyone has opportunities to grow and reach their full potential.

• We Deliver – We are uncompromising in our commitment to deliver innovative, high-quality, technology-led solutions for our customers and exceptional, sustainable value for all our stakeholders.

• We Are People of Integrity – We value honesty, trust, courage, fairness, prudence and tenacity. We believe doing what’s right for the planet, the communities where we work, and our people is good for business.

• We Empower – We empower our people with a shared purpose, the right tools and the supportive culture they need to be proactive decision-makers, to be adaptive to change, and to succeed.

• We Are a Team of Teams – We have a will to succeed, but we value the achievements of our team of teams over individual accomplishments. Our collective focus makes us a better, stronger, more effective company.

We have also embedded environmental, social and governance (ESG) principles in every business operation and corporate function. Not only are we committed to operating safely, sustainably and equitably, but we are also committed to using our capabilities and expertise to help our customers accomplish their sustainability goals. Worldwide, KBR employs a diverse workforce approximately 29,000 people strong, with customers in more than 80 countries and operations in 40 countries. At KBR, We Deliver.

Information Systems Security Officer (ISSO)

KBR has an opening for an Information Systems Security Officer to join our team of qualified, diverse professionals onsite at our location. This position requires on site presence.

Role and Responsibilities:

• Serve as an Information Systems Security Officer (ISSO) at our location working with the Site IA in support of a KBR Information Systems. Candidate will perform extensive assessments of systems and networks within the networking environment or enclave and identify where those systems/networks deviate from acceptable configurations, enclave policy, or local policy. Candidate will achieve this through passive evaluations (compliance audits) and active evaluations (vulnerability assessments). Position is a corporate position, and employment is not tied to a contract.

• Candidate will perform Information Assurance and IT Security tasks to ensure the secure operation of the KBR information systems as a part of the KBR Information Assurance Operations team.

• Establishes strict program control processes to ensure mitigation of risks and supports obtaining certification and accreditation of systems. This includes process support, analysis support, coordination support, security certification test support, security documentation support, investigations, software research, hardware introduction and release, emerging technology research inspections and periodic audits.

• Assists in the implementation of the required government policy (i.e., JSIG, NISPOM, SP-800-171, SP-800-53, RMF) for site-hosted information systems and makes recommendations on process tailoring. 

• Performs extensive analyses to validate established security requirements and to recommend additional security requirements and safeguards.

• Periodically conducts of a review of each system's audits and monitors corrective actions until all actions are closed.

Required Qualifications:

• Bachelor’s degree in computer, information systems management or related field from an accredited college or university or equivalent experience. 4 years’ experience as an ISSO is required.

• Experience with DOD 8500.01, Risk Management Framework (RMF) requirements as well as experience in drafting, submitting, and maintaining RMF packages, Experience with Joint Special Access Program (SAP) Implementation Guide (JSIG) packages is required.

• Experience in development and maintaining of RMF Documents including System Security Plans (SSP), System Security Checklists, Privacy Impact Assessments, and Authority to Operate (ATO) artifacts.

• Experience in developing Plan of Action and Milestones (POA&M)

• Knowledge of independent verifica