ISSO 2

• Provides support for a program, organization, system, or enclave’s information assurance program.
• Provides assistance for proposing, implementing, and enforcing information systems security policies, standards, and methodologies.
• Provides daily oversight and direction to ISSOs.
• Maintain the appropriate operational security posture for assigned systems, programs, and/or enclaves.
• Provide guidance and technical expertise on all matters that impact or effect the security of the information system.
• Assist in the development and execution of an enterprise level continuous monitoring program to minimize security risks and ensure compliance with that program on a routine basis.
• Developing, updating, and submitting the System Security Plan and other required documentation that make up the Security Authorization Package.
• Conduct configuration management for security-relevant changes to software, hardware, and firmware.
• Perform and deliver security impact analyses of changes to the system or its environment of operation.
• Assess the effectiveness of system security controls on an ongoing basis to determine system security status.
• Maintain and enforce IT security policies and implementation guidelines for customer systems in diverse operational environments.
• Provides configuration management for security-relevant information system software, hardware, and firmware.

Eight (8) years of combined work-related experience in the fields of IT, cybersecurity or security authorization is required. Experience in at least two of the following areas is required: knowledge of current security tools, hardware/software security implementation; communication protocols; or encryption tools and techniques. Familiarity with commercial security products, security authorization techniques, security incident management, and PKI and authorization services. Bachelor’s degree in Computer Science, Cyber Security or IT Engineering is required. In lieu of a Bachelor’s degree, four (4) additional years of work-related experience may be substituted. DoD 8570 compliance with IAM I is required. See also Table 1: Cyberspace Workforce Improvement