Information Systems Security Officer (ISSO)

Information System Security Officer

Key Responsibilities:

Assist the Information System Security Manager (ISSM) in fulfilling duties.

Prepare, review, and update authorization packages.

Ensure procedures exist for clearing, sanitizing, and destroying hardware and media.

Notify ISSM of changes impacting system authorization.

Conduct periodic reviews for compliance with security authorization packages.

Coordinate hardware, software, or firmware changes with ISSM and Authorizing Official (AO/DAO).

Monitor system recovery to verify security features are restored correctly.

Maintain current, accessible IS security documentation for authorized personnel.

Collect, review, and document audit records, including anomalies.

Attend technical and security training on operating systems, networking, and security management.

Execute cybersecurity self-inspection portions, including system assessment plans.

Identify vulnerabilities and implement countermeasures.

Prepare reports on security safeguards for computer systems.

Perform ISSO duties for in-house and external customers.

Support Collateral, SCI, and SAP activities in close coordination with ISSM and ISO.

Required Qualifications:

Bachelor's degree in a related field, or Associate's degree plus 2 years' experience, or equivalent 4 years' experience.

2-5 years related experience, including at least 2 years in Special Access Programs (SAP).

Prior roles as System Administrator, Network Administrator, or ISSO.

Current Top Secret/Special Compartmented Information (TS/SCI) eligibility.

Eligibility for Special Access Program Information access.

Willingness to submit to a Counterintelligence polygraph.

Meet DoD Directive 8570.01-M requirements for Information Assurance Technician Level II or Information Assurance Manager II within 6 months of hire.

Native or bilingual proficiency in English.

Technical Skills:

Information system security management and authorization processes.

Configuration management and security impact assessments.

Audit log review and anomaly documentation.

Vulnerability identification and countermeasures.

System recovery and compliance monitoring.

Hardware/media sanitization procedures.

Functional Skills:

Collaboration with ISSM, ISO, and AO/DAO.

Preparation and maintenance of security documentation.

Coordination of system changes and modifications.

Execution of self-inspections and assessment plans.

Reporting on security postures and safeguards.

Behavioral Skills:

Detail-oriented in reviews and documentation.

Proactive in notifying stakeholders of risks.

Collaborative in team environments (e.g., with ISSM).

Adaptable to training and evolving security needs.

Reliable in day-to-day operations and customer support.