Information System Security Officer (ISSO) II

The Information System Security Officer (ISSO) II is responsible for maintaining the operational security posture of assigned information systems through close collaboration with the Information System Security Manager (ISSM) and Information Security Officer (ISO). This role supports day-to-day cybersecurity operations for Collateral, Sensitive Compartmented Information (SCI), and Special Access Program (SAP) environments, including assessment and authorization activities for Department of Defense (DoD) agencies., Information System Security

• Maintain the operational security posture of assigned information systems.
• Manage the day-to-day security operations of assigned systems.
• Support physical and environmental protection, personnel security, incident handling, and security training and awareness.
• Monitor assigned information systems and their operating environments.
• Assess the security impact of system changes and provide recommendations to the ISSM.
• Conduct continuous monitoring activities for assigned authorization boundaries.
• Prepare reports on the status of security safeguards applied to computer systems.
• Perform ISSO duties in support of internal and external customers.

Authorization and Compliance

• Assist the ISSM in fulfilling assigned duties and responsibilities.
• Prepare, review, and update authorization packages.
• Develop and update authorization documentation.
• Ensure compliance with approved security authorization packages through periodic system reviews.
• Assist Department of Defense, national agency, and contractor organizations with assessment and authorization (A&A) efforts.
• Execute the cybersecurity portion of self-inspections, including security coordination and review of system assessment plans.

Configuration and Change Management

• Implement configuration management across authorization boundaries.
• Coordinate hardware, software, and firmware changes with the ISSM and AO/DAO prior to implementation.
• Notify the ISSM of changes that may affect the authorization determination of information systems., * Ensure approved procedures are followed for clearing, sanitizing, and destroying hardware and media.
• Monitor system recovery processes to verify security features and procedures are properly restored and functioning.
• Ensure information system security documentation is current and accessible to authorized personnel.
• Ensure audit records are collected, reviewed, documented, and anomalies are identified.
• Identify cybersecurity vulnerabilities and assist with implementing countermeasures.
• Attend required technical and security training related to assigned duties.

• Bachelor’s degree and two (2) years of relevant experience [Required]; or
• Associate degree and four (4) years of relevant experience [Required]; or
• Six (6) years of relevant experience in lieu of a degree [Required]., * Two (2) to five (5) years of related experience, particularly developing RMF packages or bodies of evidence [Required].
• Prior experience as a System Administrator, Network Administrator, or Information System Security Officer (ISSO) [Required].
• Special Access Program (SAP) experience [Required]., * Active TS/SCI clearance [Required].
• Must be willing to obtain a CI Polygraph [Required]