Information System Security Officer

Summary

We are seeking a skilled Information System Security Officer (ISSO) to help ensure the security and continued compliance of our classified information systems. In this role, you will work closely with our Director of IT and Facility Security Officer (FSO) to implement and maintain cybersecurity policies, support system accreditation efforts, and monitor ongoing compliance with government standards such as NIST SP 800-53 and RMF. This is a hands-on role ideal for someone who has experience in both IT and security and who thrives in a fast-paced, security-focused environment.

Key Responsibilities

• Responsible for supporting Risk Management Framework program as stipulated by various US Government requirements including (but not limited to): National Industrial Security Operating Manual (NISPOM), and the DCSA Assessment and Authorization Process Manual (DAAPM)
• Monitor Risk Management Framework compliance by performing periodic self-inspections, tests, and reviews of information systems to ensure that workstations/servers are operating as authorized/accredited
• Coordinate with program/project stakeholders, Information System Security Manager, the Facility Security Officer, and Program Leads to develop, maintain, and evaluate security documentation, including System Security Plan, System Security Authorization Agreements, and SOPs
• Maintain day-to-day security posture and continuous monitoring of IS including security event log review and analysis
• Performs Assessment and Authorization activities such as information system certification testing of required configuration controls and preparing/maintaining various documentation such as: Standard Operating Procedures (SOP), System Security Plan (SSP), Risk Assessment Report (RAR), etc.
• Manages and maintains Continuous Monitoring (ConMon) and Plan of Action and Milestones (POA&M)
• Responsible for security sustainment activities including (but not limited to): hardware change management, software change management, account management, media protection, user interface, file transfers, etc.
• Maintain thorough understanding of NIST 800-53 controls
• Maintain a relationship with our ISSP and other mission partners
• Will support the Facility Security Officer (FSO) in managing and maintaining the company’s security program, ensuring compliance with all applicable government regulations and company policies.
• Administrative experience tracking and record keeping
• Assist the FSO with the overall security program
• Perform administrative security support functions

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time based on business needs.

Supervisory Responsibility

This position has no direct supervisory responsibilities.

Position Type/Expected Hours of Work

This is a full-time position at 40 hours per week.  Typical office hours include Monday-Friday, 8:00am-5:00pm, however these hours will vary based on workload and the manager’s discretion.  This job may require more than 40 hours of work per week as the need arises.

Travel

About 10% of travel is expected for this position.

Physical Demands

While performing the duties of this job, the employee is regularly required to talk or hear. Specific vision abilities required by this job include close vision and ability to adjust focus. This would require the ability to lift files, open filing cabinets and bend or stand on a stool as necessary. Reasonable accommodations may be made to enable