Information Systems Security Officer (ISSO)

• Assist in the development of application security policies.
• Establish procedures & processes to ensure tracking and mitigation of risks identified during the ATO process.
• Develop and update Interconnection Security Agreement documentation as needed.
• Develop and update System Security Plans (SSPs) and supporting documentation.
• Assist with tailoring of security control baselines for general support systems and other FISMA reportable systems, including cloud systems utilizing FedRamp controls.
• Collect and validate control implementation statements from subject matter experts.
• Oversee development of security and privacy control implementation statements per NIST SP 800-53 and agency security policy standards.
• Assist with the migration to NIST SP 800-53 Rev 5, identifying gaps and providing understanding of new requirements to technical teams for implementation.
• Conduct security reviews for changes impacting hardware, software, baselines, connections, or applications.
• Review and assess POA&M outputs, recommending additional work or closure.
• Support the continuous monitoring program as necessary when Information System Continuous Monitoring (ISCM) results will be used to support continuing authorization requirements or ongoing authorizations.
• Document and communicate control deficiencies for POA&M consideration.
• Assist in developing security policies, ensuring compliance, and updating documentation.
• Provide information for status reports, briefings, schedules, and project plans in written and oral form.
• Compliance and Auditing processes and inspections for all applications; ensures validity and accuracy review of all associated documentation.
• Performs compliance reviews of applicable STIGs, performs risk assessments, and performs security test evaluations and audits.
• Analyzes security requirements for information protection for enterprise applications.
• Other duties as assigned.

• Bachelor’s degree (BA/BS).
• 5+ years of experience (7+ years with AA/AS).
• IAT II Certification.
• Experience with RMF.
• Experience with eMASS.
• Ability to interpret and apply DOD and Army-level cyber instructions and regulations.
• Ability to apply cybersecurity theories and principles to an IT system.
• Excellent written and oral communication skills.
• Understanding of the application of DISA STIGs.
• Ability to manage people, schedules, tasks, and projects.
• Must be a U.S. citizen and have an active Secret security clearance.

Preferred Qualifications:

• Experience with Windows and Linux operating systems.
• Experience with Trellix, ESS, Elastic, ACAS, NESSUS, SCCM, PowerShell.

Avion Solutions Inc., an employee-owned company, is seeking candidates for anInformation Systems Security Officer (ISSO) to support PAE Aviation. This position is based in Huntsville, AL, and contingent upon award.