Information System Security Officer (ISSO)

Secure our Nation, Ignite your Future

The information Systems Security Officer will provide "cradle-to-grave" support for assigned systems at the Defense Information Systems Agency (DISA). This role is fully remote.

Primary Responsibilities :

• Perform ISSO responsibilities, including acting as a point of contact and subject matter expert for all cybersecurity related aspects to the assigned information systems, ensuring systems are maintained per security policies and procedures and maintaining compliance and ongoing reporting to management.
• Conduct regular briefings with the customer on cybersecurity status, including preparing briefing materials.
• Work closely with government Information Assurance team to support Authorization to Operate (ATO) accreditation conditions and requirements. Coordinate and support site visits / audits, including System Readiness Reviews (SRR) and Site Assistance Visits (SAV).
• Author, review, coordinate and submit required artifacts to eMASS (including change requests) to achieve milestones such as Interim Authority to Test (IATT) and ATO in accordance with the project schedule.
• Submit and gain approval of Ports, Protocols and Services Management (PPSM) updates, including CLSA and exception form submissions.
• Develop and update assessment and authorization documentation (Body of Evidence) for management and continuous monitoring of information systems.
• Procedures (TTP), Plan of Action and Milestones (POA&M) and Federal Information Security Management.
• Perform information system Assessment and Authorization planning, testing, assessing and liaison activities, including security scans, scan results analysis and audit trail log reviews. Document scan results and findings according to NIST Risk Management Framework (RMF) processes.
• Conduct regular privileged user management reviews. Evaluate software and hardware during pre-acquisition phases to determine its ability to meet minimum security requirements based on NIST SP 800-53 security controls.
• Assist with the implementation of security procedures, and verify information system security requirements, including coordinating the execution, review, and disposition of STIG checklists for systems, applications, developed code and other components.
• Conduct ongoing security reviews and tests of systems to verify security features and controls are functional and effective. Take corrective action to resolve identified vulnerabilities.

Basic Qualifications:

• Requires 2+ years of prior relevant experience.
• Active DoD Secret Security Clearance
• Hold an active security certification that meets DOD 8570 IAT level II or higher, such as Security+.
• The qualified candidate shall have excellent customer service skills and the ability to work independently, prioritize, schedule, and complete multiple tasks.
• Ability to multi-task and self-assign work in a fast-paced environment.
• Strong communication skills that enable proactive and effective collaboration with a virtual team, including the ability to clearly articulate status and present to both customers and program leadership.
• Candidate shall have the ability to develop and present management level briefings.
• Demonstrate potential and willingness to learn and adapt to rapid changes in technology.

Physical Requirements:

Must be able to stand for at least 30% of job duties

Preferred Qualifications:

• Vulnerability assessment and analysis experience utilizing ACAS/NESSUS and DISA STIGs.
• Experience with DoD implementation of the Risk Management Framework (RMF) and governing directives (NIST, CNSS, DSS, etc.).
• NIST RMF Assessment and Authorization (A&A) experience.
• Experience with operating IT security tools, such as ACAS, HBSS, DISA STIGs.
• Cloud/AWS accreditation experience.
• Prior experience working Cybersecurity in accordance with US Government (USG), Department of Defense (DOD).

The projected compensation range for this position is $108,200-$180,300. There are differentiating factors that can impact a final salary/hourly rate, including, but not limited to, Contract Wage Determination, relevant work experience, skills and competencies that align to the specified role, geographic location (For Remote Opportunities), education and certifications as well as Federal Government Contract Labor categories. In addition, ManTech invests in it’s employees beyond just compensation. ManTech’s benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, Short Term and Long Term Disability, Retirement and Savings, Learning and Development opportunities, wellness programs as well as other optional benefit elections.

For all p