Information Systems Security Officer

Summary

All Native Group is seeking an Information System Security Officer (ISSO) that serves as the principal advisor to the Information System Owner (SO), Business Process Owner, and the Chief Information Security Officer (CISO) / Information System Security Manager (ISSM) on all matters, technical and otherwise, involving the security of an information system. Responsible for ensuring the implementation and maintenance of security controls in accordance with the Security Plan (SP) and Department of Homeland Security (DHS) policies.

 

Essential Functions

·         Collaborates with users, vendors, technicians, and managers to understand and assess computing and system needs and requirements.

·         Communicates the goals, policies, and procedures of the company to the CIS team; develops plans to implement these needs.

·         Evaluates current technology use and needs of the company and recommends software and hardware improvements.

·         Oversees backup, security, and user help systems.

·         Remains current on advances in technology.

·         Provides technical support to users.

·         Prepares and delivers operational or project progress reports.

·         Implements and oversees operational budget and expenditures.

·         Performs other related duties as assigned.

May be requested and required to participate in Proposal Support functions due to expertise 

 

Competencies

·         Facilitates and manages the development, modification, and operation of security protocols including intrusion detection and prevention systems to protect the organizations information from breach or loss.

·         Conducts periodic audits and due diligence checks of security protocols, evaluating systems for vulnerabilities.

·         Recommends modifications to security protocols as required.

·         Develops and/or provides training and guidance on acceptable use, risk management, incident response, and security protocols to employees.

·         Periodically briefs senior management on status of security system and protocols.

·         Reviews reports of, and evaluates response to, any security incidents.

·         Ensures that monitoring operations comply with all applicable government regulations and standards.

·         Maintains current knowledge of emerging security threats, technical challenges, and developments in system protection and IT security standards.

·         Performs other related duties as assigned.

 

Supervisory Responsibility

None required for this position

 

Work Environment

This job operates in a professional office environment. This role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fax machines.

 

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.

 

·         Must be able to remain in a stationary position 75% of the time.

·         Occasionally moves about inside the office to access file cabinets, office machinery, etc.

·         Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine, and computer printer.

·         Expresses or exchanges ideas by means of the spoken word.  Those activities in which they must convey detailed or important spoken instructions to other workers accurately, loudly, or quickly.

·         Frequently moves standard office equipment up to 25 pounds.

·         Must be able to work indoor conditions 90% of the time.

 

While performing the duties of this job, the employee is regularly required to talk or hear. The employee frequently is required to stand; walk; use hands to finger, handle or feel; and reach with hands and arms.

 

Position Type/Expected Hours of Work

This is a full-time position. Typical days and hours of work are Monday through Friday, 8:00 a.m. to 5:00 p.m.  Evening and weekend hours required, as required by business need.

 

Travel

 Travel is primarily local during the business day, although some out of the area travel and overnight may be expected.

 

Experience

·         Experience working as an ISSO supporting federal government information systems (e.g. DHS IACS Xacta), IT security certifications (e.g. CISSP, ISSEP, CEH, etc.), experience with ISO, NIST and US Government standards and cybersecurity frameworks (e.g. FI