Information Systems Security Officer (ISSO) II

Maintain the appropriate operational security posture of information systems in close collaboration with the ISSM and ISO. Manage system security aspects and day-to-day security operations, including physical and environmental protection, personnel security, incident handling, and security training and awareness.

Monitor information systems and their operating environments, develop and update authorization documentation, and implement configuration management across authorization boundaries. Assess the security impact of changes and provide recommendations to the ISSM.

Support Special Access Programs (SAPs) for Department of Defense (DoD) agencies, including HQ Air Force, the Office of the Secretary of Defense (OSD), and Military Compartments efforts. Provide day-to-day support for Collateral, Sensitive Compartmented Information (SCI), and SAP activities., Security Authorization and Documentation

• Assist the ISSM in fulfilling their duties and responsibilities.
• Prepare, review, and update authorization packages.
• Conduct periodic information system reviews to ensure compliance with security authorization packages.
• Keep information system security documentation current and accessible to properly authorized individuals.
• Prepare reports on the status of security safeguards applied to computer systems.

Configuration Management and Security Impact Analysis

• Notify the ISSM of changes that may affect information system authorization determinations.
• Coordinate hardware, software, or firmware changes with the ISSM and AO/DAO before implementation.
• Conduct security impact analyses of all configuration management changes to authorization boundaries and provide results to the ISSM., * Ensure approved procedures are in place for clearing, sanitizing, and destroying hardware and media.
• Monitor system recovery processes to ensure security features and procedures are restored and functioning correctly.
• Ensure audit records are collected, reviewed, and documented, including anomalies.
• Identify cybersecurity vulnerabilities and assist in implementing countermeasures.
• Perform ISSO duties for in-house and external customers., * Execute the cybersecurity portion of self-inspections, including security coordination and review of all system assessment plans.
• Attend required technical and security training relevant to assigned duties, including operating systems, networking, and security management.

Computer Security, Security Clearance, Sensitive Compartmented Information (SCI), Top Secret Clearance, Incident Response, ISO (International Organization for Standardization), Systems Administration/Management, Operations Security (OPSEC), Information/Data Security (InfoSec), Security Monitoring, * Bachelor’s degree with 2 years of experience, associate’s degree with 4 years of experience, or 6 years of experience with no degree. [Required], * 2-5 years of related experience, especially in developing RMF packages or bodies of evidence. [Required]

• Prior performance in roles such as System/Network Administrator or ISSO. [Required]
• SAP experience. [Required], * TS/SCI; must be willing to obtain a CI Poly. [Required]