Information Systems Security Officer (ISSO)

Location: Washington D.C., DC, USA, Dayton, OH, USA

Work Location: onsite

• Assist the ISSM in meeting their duties and responsibilities.
• Prepare, review, and update authorization packages.
• Ensure approved procedures are in place for clearing, sanitizing, and destroying hardware and media.
• Notify the ISSM of any changes that may affect the authorization determination of the information system(s).
• Conduct periodic reviews of information systems to verify compliance with the security authorization package.
• Coordinate changes or modifications to hardware, software, or firmware of the system with the ISSM and AO/DAO prior to implementation.
• Monitor system recovery processes to verify proper restoration of security features and procedures.
• Maintain current and accessible IS security-related documentation for authorized personnel.
• Collect, review, and document audit records, including any anomalies.
• Attend technical and security training relevant to assigned duties (e.g., operating system, networking, security management).
• Execute the cybersecurity portion of the self-inspection, including providing security coordination and review of system assessment plans.
• Identify cybersecurity vulnerabilities and assist in implementing countermeasures.
• Prepare reports on the status of security safeguards applied to computer systems.
• Perform ISSO duties to support both in-house and external customers.
• Conduct security impact analysis activities and report them to the ISSM for all configuration management changes within the authorization boundaries.

• 5+ years of relevant experience is required
• Demonstrated performance in roles such as System Administrator, Network Administrator, or ISSO.

• Bachelor’s degree in a related discipline.

• Must meet the position and certification requirements outlined in DoD Directive 8140 for Information Assurance Manager Level II or Information Assurance Architect and Engineer Level I.

• Active TS/SCI
• 2 years of experience with Special Access Programs (SAP).

• Experience with enterprise IT systems is highly desired.
• Strong understanding of cybersecurity principles, practices, and industry standards.