Information Systems Security Officer

True Anomaly, Inc.; Denver (CO); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Employer-Sponsored Healthcare

Generous Time Off

Equity

401k and Roth 401k

Learning & Development Opportunities

Job summary

True Anomaly, Inc. seeks an Information Systems Security Officer (ISSO) to oversee the security posture of all classified information systems and develop RMF documentation for system authorization.

This onsite role in Centennial, CO reports to the Director of Government Security. Responsibilities include building RMF packages, implementing policies per ICD-503 and NIST 800-53, coordinating with system admins and network engineers, and ensuring timely patching and secure configurations.

Qualifications

• 6+ years of relevant work experience.
• U.S. Citizen.
• Current active DoD TS/SCI clearance.

Responsibilities

• Conduct security reviews of proposed changes or additions to the information system and advise the ISSM on security relevance.
• Ensure all personnel receive the necessary technical and security training to perform their duties effectively.
• Assist with information system security management and day-to-day security operations.
• Perform vulnerability/risk assessment analysis to support continuous monitoring and the certification and accreditation process.
• Serve as a member of the Change Control Board (CCB) to ensure configuration management for Cybersecurity-relevant software, hardware, and firmware is maintained and documented.

Skills

RMF expertise

NIST 800-53

Policy development

Vulnerability assessment

Security reviews

Communication

Tools

STIGs

RMF artifacts (SSP, POAM, SCTM)

System topology diagrams

Job description

• The Information Systems Security Officer (ISSO) will oversee the security posture of all classified information systems and develop/revise necessary Risk Management Framework (RMF) documentation to support system authorization. The role reports to the Director of Government Security and will be onsite in our Centennial, CO office
• Build and update standard RMF packages, including the Systems Security Plan (SSP), Plan of Actions and Milestones (POAMs), Security Control Traceability Matrix (SCTM), hardware and software inventories, and network topology diagrams
• Lead the development and implementation of security policies and procedures required by assessment and authorization activities in accordance with ICD-503, DAAPM, NISPOM, JSIG, and NIST 800-53
• Program guidance and direction to program personnel, ensuring effective communication within the roles
• Collaborate with System Administrators and Network Engineers to ensure timely application of security patches and secure configurations in line with Security Technical Implementation Guidelines (STIGs)

Benefits

• 100% Employer-Sponsored Healthcare: We’ve got you covered! Our comprehensive healthcare package is fully sponsored, ensuring you and your loved ones stay healthy and worry-free, so you can focus on shaping the future of space security.
• Generous Time Off: We believe in working hard and recharging fully. Our generous vacation policy gives you the flexibility to take the time you need to relax, explore, and come back energized to take on new challenges.
• Equity: Own an equity stake in True Anomaly as you build something transformative. With equity options, you’re not just working for True Anomaly; you’re an owner. As an essential part of our growth and future success, we want you to share in the upside potential!
• 401k and Roth 401k options: Plan for tomorrow with our 401K and Roth 401K options that put you in control of your financial future.
• Learning & Development Opportunities: Your growth fuels our innovation. We’re committed to providing you with the resources and training to expand your skills, spark new ideas, and advance your career with us.

Conduct security reviews of proposed changes or additions to the information system (including hardware or software) and advise the Information System Security Manager (ISSM) on security relevanceEnsure all personnel receive the necessary technical and security training to perform their duties effectivelyAssist with information system security management and day-to-day security operationsPerform vulnerability/risk assessment analysis to support continuous monitoring and the certification and accreditation processU.S. Citizen and eligible for TS/SCI clearanceServe as a member of the Change Control Board (CCB) to ensure configuration management for Cybersecurity-relevant software, hardware, and firmware is maintained and documented6+ years of relevant work experienceCurrent active DoD TS/SCI clearance