Information System Security Officer (ISSO)

Location: Boston, MA, USA

Work Location: onsite

• Assist the ISSM in meeting their duties and responsibilities.
• Prepare, review, and update authorization packages.
• Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media.
• Notify ISSM when changes occur that might affect the authorization determination of the information system(s).
• Conduct periodic reviews of information systems to ensure compliance with the security authorization package.
• Coordinate any changes or modifications to hardware, software, or firmware of a system with the ISSM and AO/DAO prior to the change.
• Monitor system recovery processes to ensure security features and procedures are properly restored and functioning correctly.
• Ensure all IS security-related documentation is current and accessible to properly authorized individuals.
• Ensure audit records are collected, reviewed, and documented (to include any anomalies).
• Attend required technical and security training (e.g., operating system, networking, security management) relative to assigned duties.
• Execute the cyber security portion of the self-inspection, to include provide security coordination and review of all system assessment plans.
• Identify cyber security vulnerabilities and assist with the implementation of the countermeasures for them.
• Prepare reports on the status of security safeguards applied to computer systems.
• Perform ISSO duties in support of in-house and external customers.
• Conduct security impact analysis activities and provide to the ISSM on all configuration management changes to the authorization boundaries.

• 5+ years minimum related experience; 7 years of experience desired. Years of experience accepted in lieu of degree.
• Prior performance in roles such as System, Network Administrator or ISSO
• Experience implementing and supporting the DoD Risk Management Framework (RMF) and system authorization processes.

• Bachelor's degree in related discipline; years of experience can be considered in lieu of degree.

• Must meet position and certification requirements outlined in DoD Directive 8570.01-M for Information Assurance Technician Level II or Information Assurance Manager II.

• Active Top-Secret clearance with SCI and SAP eligibility.
• Willingness to submit to a Counterintelligence polygraph.