Information System Security Officer (5617)

The ISSO is responsible for ensuring the appropriate operational security posture is maintained for the component DoD IS or PIT system. ISSOs will:

• Confirm that all ISs within their area of responsibility have a current ATO.
• Provide advice in describing the system and its functions, information types, operating environments, and security requirements.
• Review hardware, software and security capabilities at least semi-annually to ensure accuracy of eMASS information, configuration, vulnerability scanning compliance, exposures and security concerns are updated.
• Confirm implementation of vulnerability management dissemination, reporting, and compliance procedures.
• Prepare, distribute, and maintain plans, instructions, and SOPs concerning system security.
• Review and evaluate the effects on security of system changes, including interfaces with other ISs and documents all changes

Required Skills & Experience 

•  Ability to be onsite in Arlington, VA up to three days per week
• Bachelors Degree is required
• Secret Clearance required.
• Knowledge of DoD RMF and ATO processes and the ability to maintain current ATO for systems.
• Security policy and procedure development and documentation skills (plans, SOPs, instructions; SSP/POA&M familiarity).
• System security assessment and authorization (A&A) capabilities, including preparing/reviewing authorization packages.
• Vulnerability management and vulnerability scanning compliance, with experience using eMASS or equivalent tools.
• Configuration management and change control, including evaluating security impact of changes and maintaining accurate security documentation.
• Incident response and containment coordination, with ability to initiate protective/corrective actions.
• Strong collaboration skills for ongoing coordination with organizational cybersecurity personnel and ISSMs/ISMs.
• Documentation and record-keeping discipline to ensure security-related docs are current and accessible.