Information System Security Officer (ISSO) II

The Amatriot Group; Colorado Springs (CO); On-site; USD 110,000 - 112,000; Full time

Job summary

The Amatriot Group is seeking an Information System Security Officer (ISSO) to manage security posture for DoD systems. The role supports SAPs and collaborates with the ISSM and ISO to protect collateral, SCI, and SAP activities.

Responsibilities include maintaining documentation, reviewing authorization packages, and conducting security analyses. TS/SCI clearance and CI Poly are required, with a Bachelor’s or Associate degree plus relevant experience preferred.

Qualifications

• Experience developing RMF packages or bodies of evidence.
• Prior performance in roles such as System/Network Administrator or ISSO.
• SAP experience is required.
• Active TS/SCI clearance is required; CI Poly is required.
• Bachelor’s or Associate degree with relevant experience is accepted.

Responsibilities

• Assist the ISSM in meeting duties and responsibilities.
• Monitor information systems and their environments of operation in coordination with the ISSM and ISO.
• Conduct periodic reviews of information systems to ensure compliance with the security authorization package.
• Ensure all information system security-related documentation is current and accessible to properly authorized individuals.
• Prepare reports on the status of security safeguards applied to computer systems.
• Perform ISSO duties in support of in-house and external customers.

Skills

RMF packages

Security controls

Incident handling

Security training

DoD programs

Education

Bachelor's degree

Associate's degree

Job description

Location: Schriever AFB, CO

Security Clearance: Active TS/SCI [Required] Must be able to obtain a CI Poly

Job Type: Full-Time

Target Salary Range*: $109,500-$111,500

• This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary

Position Overview

The Information System Security Officer (ISSO) is responsible for ensuring the appropriate operational security posture is maintained for an information system and works closely with the ISSM and ISO. The ISSO manages the security aspects of an information system and supports day-to-day security operations, including physical and environmental protection, personnel security, incident handling, and security training and awareness.

The position supports Special Access Programs (SAPs) for Department of Defense (DoD) agencies, including HQ Air Force, Office of the Secretary of Defense (OSD), and Military Compartments efforts. The ISSO provides day-to-day support for Collateral, Sensitive Compartmented Information (SCI), and SAP activities.

Key Responsibilities

• Assist the ISSM in meeting duties and responsibilities.
• Monitor information systems and their environments of operation in coordination with the ISSM and ISO.
• Conduct periodic reviews of information systems to ensure compliance with the security authorization package.
• Ensure all information system security-related documentation is current and accessible to properly authorized individuals.
• Prepare reports on the status of security safeguards applied to computer systems.
• Perform ISSO duties in support of in-house and external customers.

Authorization and Risk Management

• Prepare, review, and update authorization packages.
• Develop and update authorization documentation.
• Notify the ISSM when changes occur that might affect the authorization determination of information systems.
• Conduct security impact analysis activities for all configuration management changes to authorization boundaries and provide the results to the ISSM.
• Execute the cybersecurity portion of the self-inspection, including security coordination and review of all system assessment plans.

Configuration and System Management

• Coordinate changes or modifications to system hardware, software, or firmware with the ISSM and AO/DAO before implementation.
• Implement configuration management across authorization boundaries.
• Assess the security impact of configuration changes and make recommendations to the ISSM.
• Monitor system recovery processes to ensure security features and procedures are properly restored and functioning correctly.

Security Controls and Documentation

• Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media.
• Ensure audit records are collected, reviewed, and documented, including anomalies.
• Identify cybersecurity vulnerabilities and assist with implementing countermeasures.

Training and Awareness

• Attend required technical and security training, including operating system, networking, and security management training, as related to assigned duties.

Qualifications

Education

• Bachelor's degree and 2 years of experience [Required].
• Associate's degree and 4 or 6 years of experience with no degree [Required].

Experience

• 2-5 years of related experience, especially in developing Risk Management Framework (RMF) packages or bodies of evidence [Required].
• Prior performance in roles such as System/Network Administrator or ISSO [Required].
• SAP experience [Required].

Certifications

• IAT Level II or IAM Level II certification [Required].

Clearance

• TS/SCI clearance [Required].
• Must be willing to obtain a CI Poly [Required].