Information System Security Officer (ISSO) III

The Information System Security Officer (ISSO) III is responsible for maintaining the operational security posture of assigned information systems in close collaboration with the Information System Security Manager (ISSM) and Information Security Officer (ISO). This role manages the day-to-day security operations of systems supporting Department of Defense (DoD) Special Access Programs (SAPs), including Collateral, Sensitive Compartmented Information (SCI), and SAP environments., * Maintain the appropriate operational security posture for assigned information systems.

• Manage the day-to-day security operations of assigned systems.
• Monitor information systems and their environments of operation.
• Develop and update system authorization documentation.
• Implement configuration management across authorization boundaries.
• Assess the security impact of system changes and provide recommendations to the ISSM.
• Notify the ISSM of changes that could affect system authorization determinations.
• Conduct continuous monitoring activities for assigned authorization boundaries.

Authorization and Compliance

• Prepare, review, and update authorization packages.
• Conduct periodic reviews of information systems to ensure compliance with the security authorization package.
• Coordinate hardware, software, and firmware changes with the ISSM and AO/DAO before implementation.
• Execute the cybersecurity portion of self-inspections, including security coordination and review of system assessment plans.
• Assist Department of Defense, National Agency, and contractor organizations with Assessment and Authorization (A&A) efforts.

Security Operations and Monitoring

• Ensure approved procedures are followed for clearing, sanitizing, and destroying hardware and media.
• Monitor system recovery processes to verify security features and procedures are restored and functioning properly.
• Ensure all information system security documentation is current and accessible to authorized personnel.
• Ensure audit records are collected, reviewed, and documented, including identified anomalies.
• Identify cybersecurity vulnerabilities and assist with implementing countermeasures.
• Prepare reports on the status of security safeguards applied to computer systems.
• Perform ISSO duties in support of internal and external customers., * Support physical and environmental protection, personnel security, incident handling, and security training and awareness activities.
• Provide day-to-day support for Collateral, SCI, and SAP activities.
• Attend required technical and security training related to assigned responsibilities.

• Bachelor’s degree [Required]
• Four (4) additional years of related experience may be substituted in lieu of a degree. [Required], * Five (5) to seven (7) years of related experience, particularly developing RMF packages or bodies of evidence. [Required]
• Prior experience as a System Administrator, Network Administrator, or Information System Security Officer (ISSO). [Required]
• Two (2) or more years of Special Access Program (SAP) experience. [Required], * Active TS/SCI clearance. [Required]
• Must be willing to obtain a CI Polygraph. [Required]