Information Systems Security Officer (ISSO)

Information Systems Security OfficerThe Information Systems Security Officer (ISSO) will be responsible for reviewing, implementing, updating and documenting ESTS lab's information, security policies and procedures, managing security audits, vulnerability and threat assessments, directing responses for system intrusions, and ensuring fulfillment of legal and contractual information security and privacy mandates, preventing and detecting intrusion.ResponsibilitiesDemonstrate a strong knowledge of cybersecurity principles and DoD requirements relevant to the confidentiality, integrity, availability and authentication of systems operating in a classified environmentEnsure compliance with the Chapter 8 regulatory requirements of the with National Industrial Security Program Operating Manual (NISPOM)Applies current computer science technologies to the development, evaluation, and integration of computer systems and networks to maintain system security for classified information systems. Primary liaison to the local Defense Counterintelligence and Security Agency (DCSA) Information Systems Security Professional (ISSP) on all matters pertaining to classified information systemsPropose, coordinate, implement, and enforce information systems security policies, standards, and methodologiesSupport the development and maintenance of technical documentation and standard operating procedures (SOPs)Execute the security assessment and authorization process for Risk Management Framework (RMF) requirementsSupport the Security Manager with site accreditation/reaccreditation processPerform updates to Risk Management Framework accreditation documentation for assigned systemsPrepare and submit classified spillages/incident responsesPerforms other duties as assignedQualificationsEducation:High School Diploma or GED required; Bachelor's Degree preferredExperience:Three years of relevant work experience as a Security Analyst to include; developing, editing, and auditing cyber security policies, plans, and procedures for government systems and programsKnowledge and experience working with NIST security controls and regulations requiredExperience conducting vulnerability audits, security configuration checks, and system configuration scans to meet Cyber Security requirements requiredAny combination of education/experience may be substituted for job requirements at the recommendation of the hiring manager and approval of the COO or higher.