Information System Security Officer (ISSO)

Federal IT Consulting (FEDITC); Ohio; On-site; USD 110,000 - 160,000; Full time

Job summary

FEDITC, LLC is seeking an Information System Security Officer (ISSO) to support DoD and intelligence clients. The role requires U.S. Citizenship and an active Secret DoD clearance and will be based in Warren, MI.

As ISSO, you will advise on security controls, coordinate with the ISO, prepare and maintain the System Security Plan and RMF artifacts, and work with stakeholders to ensure secure operations across the information system.

Qualifications

• 2+ years of governance, risk and compliance (GRC) experience or related role.
• Strong knowledge of security principles, practices and technologies.
• Experience with security assessment tools and techniques.
• Excellent problem-solving and analytical skills.
• DoD/military training: 531-25B30-C45, J-3B-0440, DAU ISSM Basic Playlist, RMF Implementers Course or equivalent.

Responsibilities

• Coordinate with the ISO to maintain the appropriate security posture of the information system.
• Serve as principal advisor on matters involving the security of the information system.
• Manage day-to-day security operations of the system.
• Monitor information system and environment.
• Manage and control changes to the system.
• Handle incidents.
• Assist in developing security policies, Security Plan, Security Impact Analysis, and RMF artifacts.
• Describe system architecture, components, location, data flow, interconnections and security requirements.

Skills

GRC experience

Security principles

Assessment tools

Problem-solving

DoD training

Education

Bachelors in Cybersecurity

Job description

FEDITC, LLC is a fast-growing business supporting DoD and other intelligence agencies worldwide. FEDITC develops mission critical national security systems throughout the world directly supporting the Warfighter, DoD Leadership, & the country. We are proud & honored to provide these services.

Overview of position:

FEDITC is seeking an Information System Security Officer (ISSO) to work in Warren, MI. A United States Citizenship and an active Secret DoD Security Clearance is required to be considered for this position.

The Information System Security Officer (ISSO) serves as the principal advisor to the Information System Owner (SO), Business Process Owner, and the Chief Information Security Officer (CISO) / Information System Security Manager (ISSM) on all matters, technical and otherwise, involving the security of an information system. ISSOs are responsible for ensuring the implementation and maintenance of security controls in accordance with the Security Plan (SP) and Department of Defense (DoD) policies. In almost all cases, ISSOs will be called on to provide guidance, oversight, and expertise, but they may or may not develop security documents or actually implement any security controls. While ISSOs will not actually perform all functions, they will have to coordinate, facilitate, or otherwise ensure certain activities are being performed. As a result, it is important for ISSOs to build relationships with the SO, technical staff, and other stakeholders.

Responsibilities:

The goal of information security is to help the business process owner accomplish the mission in a secure manner. To be successful, ISSOs need to know and understand the following:

• Coordinates with the ISO to ensure the appropriate operations security posture is maintained for the Information system
• Servers as principal advisor on all matters involving the security of an Information System
• Manage day-to-day security operations of the system
• Monitors information system and environment
• Manages and controls changes to the system
• Handles incidents
• Assists in the development of the: Security policies and procedures, Development and ongoing maintenance of the System Security Plan, Security Impact Analysis, Mission and business functions of the Information System
• How the system supports the organization's mission - System details, including:
  • Architecture
  • System components (hardware, software, peripherals, etc.)
  • Location of each system component
  • Data flow
  • Interconnections (internal and external)
  • Security categorization, Security requirements, Configuration management processes and procedures

Experience/Skills:

• Two or more years of proven Governance, Risk and Compliance (GRC) experience or related role
• Strong knowledge of security principles, practices, and technologies
• Experience with security assessment tools and techniques
• Excellent problem-solving and analytical skills
• DoD/Military Training: 531-25B30-C45, J-3B-0440, DAU ISSM Basic Playlist, RMF Implementers Course or equivalent

Education:

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Data Science, Software Engineering, or Information Technology (from an ABET accredited or NCAE-C-designated institution)

Certifications Required:

Must have one of the following certifications:

• CompTIA Security +, CASP+, CISM, CISSP, CCISO, CCSP, CGRC/CAP, Cloud+, GSEC, SSCP, CISSO, CISSP-ISSMP, FITSP-M, GCIA, GCIH, GCSA, GISCP, GSLC

Clearance:

• Active Secret clearance is required.
• Must be a US Citizen and pass a background check.
• Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC'S Client(s)/Customer(s)/Prime contractor(s).

FEDITC, LLC. is committed to fostering an inclusive workplace and provides equal employment opportunities (EEO) to all employees and applicants for employment. We do not employ AI tools in our decision-making processes. Regardless of race, color, religion, sex (including pregnancy), sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran, FEDITC, LLC. ensures that all employment decisions are made in accordance with applicable federal, state, and local laws. Our commitment to non-discrimination in employment extends to every location in which our company operates.