IDP Information Systems Security Officer

Department: IDP Information Technology Center

Campus Location: Wichita, KS - WSU Main Campus

Hire Type: Full Time

Pay: Commensurate with experience

Work Schedule: Typically, 8am - 5pm, Monday - Friday. Evenings and weekends may be required dependent upon business needs. The job is performed in person and on-site in Wichita, KS.

Export Compliance Requirement: This position requires access to EAR or ITAR controlled technologies. Applicants are required to be eligible for employment under U.S. export control laws and must meet the requirement of being a "U.S. Citizen".

Job Information

The Information Systems Security Officer (ISSO) plays a critical role in securing and maintaining a classified information system supporting a U.S. Federal Government program. Based on-site at Wichita State University's main campus, this full-time role is responsible for developing and managing the System Security Package (SSP), ensuring compliance with Federal and DoD cybersecurity requirements, and supporting the Authorization to Operate (ATO) lifecycle. The ISSO collaborates closely with internal teams and government partners to implement security controls, conduct system assessments, and ensure the protection and proper handling of classified information. This position requires eligibility under U.S. export control laws and the ability to obtain and maintain a U.S. Government security clearance.

Job Summary

The Information Systems Security Officer (ISSO) is responsible for developing, implementing, and maintaining the System Security Package (SSP) and all associated documentation required to support an Authorization to Operate (ATO) for a classified information system supporting a U.S. Federal Government program. This role ensures the system is built, configured, operated, and maintained in accordance with applicable Federal and Department of Defense (DoD) security requirements.

Essential Functions

Develops, maintains, and updates the System Security Package (SSP) and all related documents required for an ATO.
Implements and manages security controls in accordance with the Risk Management Framework (RMF) for DoD and Federal Information Systems.
Coordinates with the Information System Owner (ISO), Facility Security Officer (FSO), and Government security representatives throughout the ATO lifecycle.
Conducts system security assessments, vulnerability remediation, and continuous monitoring activities.
Manages configuration control, change management, and security impact analyses for the classified system(s).
Ensures compliance with policies, directives, and standards.
Supports classified system operations including accreditation, audits, inspections, security testing, and system upgrades.
Prepares and delivers required security documentation, incident reports, POA&Ms, and system updates;
Provides security guidance to internal and external partners and ensures classified system activity complies with government policies for protection, handling, and safeguarding of classified information.

Required Education and Experience:

• High school diploma or equivalent
• Six (6) years of related experience in information technology or cybersecurity; every 30 hours of related college coursework may be substituted for one (1) year of experience, up to four (4) years.

Knowledge, Skills and Abilities:

• Experience supporting RMF, ATO processes, or classified information systems (DoD, DOE, or IC environments).
• Familiarity with NIST SP 800 53 security controls and DoD/IC cyber requirements.
• Ability to obtain and maintain a U.S. Government security clearance.
• Strong technical understanding of system administration, networks, vulnerability management, and secure configuration.
• Excellent documentation, coordination, and communication skills.
• Strong analytical and critical thinking skills, with attention to detail and compliance requirements.

Preferred Qualifications:

• Experience as an ISSO, ISSM, System Administrator, or Cybersecurity Analyst on a classified system.
• Industry certifications such as Security+, CISSP, CAP, or other DoD 8570/8140 recognized credentials.
• Experience with SAP/SAR environments, SCGs, and classified facility operations.

Preferred License/Certifications/Training:

• Active or previous U.S. Government security clearance.

Physical Requirements:

Ability to communicate with others and accurately exchange information.
Ability to operate a computer and other office equipment including but not limited to phone, printers, copiers, and calculators.
Ability to remain in a stationary position.
Ability to interpret effectively, accurately and impartially, both receptively and expressively.