TS/SCI Information System Security Officer

Information System Security Officer

Duties/Responsibilities
• Support the ISSM with their responsibilities.
• Prepare, review, and update security authorization packages.
• Ensure proper procedures for clearing, sanitizing, and destroying hardware and media.
• Regularly review systems to verify compliance with security authorizations.
• Coordinate system changes with the ISSM and Authorizing Officials before implementation.
• Monitor system recovery to confirm security features are restored and working.
• Keep security documentation up-to-date and accessible to authorized personnel.
• Collect, review, and document audit records, including any irregularities.
• Attend required technical and security training related to the role.
• Lead cybersecurity parts of self-inspections and review system assessment plans.
• Identify security vulnerabilities and help implement solutions.
• Report on the status of security measures in place.
• Perform ISSO duties for internal and external customers.
• Analyze security impacts of configuration changes and inform the ISSM.
• Conduct continuous monitoring within authorization boundaries.
• Support the ISSM in managing system security and Risk Management Framework (RMF) compliance.
• Prepare, review, and maintain security authorization packages (A&A, POA&M).
• Ensure hardware and media are properly cleared, sanitized, and destroyed per DoD guidelines.
• Conduct periodic reviews and continuous monitoring of information systems for compliance with NIST 800-53 and RMF controls.
• Coordinate all hardware, software, and firmware changes with ISSM and Authorizing Official (AO/DAO).
• Monitor system recovery and validate restoration of all cyber security features.
• Maintain security documentation and audit trails; collect and report anomalies.
• Perform vulnerability assessments and assist in mitigation implementation.
• Lead cyber security self-inspections, system assessment plans (SAP), and Plan of Action and Milestones (POA&M) tracking.
• Generate security status reports on system safeguards.
• Execute ISSO duties supporting internal and external stakeholders.
• Conduct security impact analysis on configuration changes within authorization boundaries.

Requirements:
-BS and 5 years of experience, or HS and 9 years of experience
-Minimum of an IAT II certification
-Active TS/SCI clearance
-Experience with RMF, ACAS, ATO support, and POA&Ms

Compensation: $60-$72/hr