ISSO - Information System Security Officer

Job Description

Job Description

Job Summary:

The SCIF Information System Security Officer (ISSO) provides cybersecurity, SCI security, and SCIF administration support to ACC/A2 A26. This position supports the confidentiality, integrity, and availability of USAF Intelligence Community information resources by assisting ACC Cybersecurity Chief ISSO/ISSMs, interfacing with the ACC/A2 SSO office, administering SCI security requirements, and supporting cybersecurity compliance, assessment, authorization, and reporting activities.

Essential Functions:

• Operate in accordance with applicable SCI, cybersecurity, and facility-security guidance, including DODM 5105.21, ICD 704, ICD 705, AFMAN 14-403, and applicable DD Form 254 requirements.

• Interface with the ACC/A2 SSO office on matters related to SCI materials, SCI access, visitor control, and security compliance.

• Administer the division SCI security program and provide SCI security oversight for the division SCIF.

• Account for, control, transmit, transport, package, safeguard, disseminate, and destroy SCI material only through authorized processes and to personnel with established access and need to know.

• Serve as the official channel for certifying and receiving SCI visitor clearances and accesses; maintain SCIF access rosters and validate clearances for non-badged visitors.

• Maintain Defense Information System for Security (DISS) data, SCI access records, alarm access records, container records, SF 700 forms, SF 701 activity checklists, SF 702 security container check sheets, and related security documentation.

• Conduct or manage SCI personnel, information, physical, and technical security actions, including support to TEMPEST and TSCM-related procedures when required.

• Approve, label, track, and account for classified media; ensure unmarked or unauthorized media and personal electronic devices are not present within the SCIF.

• Verify system classification markings, program stickers, hard-drive accountability labels, classification banners, secure phone accountability, emergency contact signage, copier/shredder approval letters, and related facility security requirements.

• Conduct recurring facility-security actions, including monthly security-form updates, random entry/exit checks, quarterly alarm testing, and quarterly verification of emergency-exit audible alarms.

• Gather, analyze, and report cybersecurity compliance data related to security plans, POA&Ms, Assessment and Authorization workflows, patch management, IAVAs, DoD 8140 certification status, FISMA tasks, and Authorizations to Operate.

• Coordinate with unit ISSOs, ISSMs, commanders, cybersecurity trainers, and other stakeholders to provide guidance, resolve compliance issues, and improve cybersecurity program performance.

• Assist in developing and delivering on-the-job training for Government, Contractor, and military personnel on applicable IT security tools, policies, and procedures.