Information Systems Security Officer

Accolade Llc; San Francisco (CA); On-site; USD 115,000 - 155,000; Full time

Job summary

An established industry player is seeking a skilled Information Systems Security Officer (ISSO) to enhance their security posture. This role involves supporting the implementation and enforcement of security policies, conducting vulnerability assessments, and managing day-to-day security operations. The ideal candidate will have substantial experience in security tools and practices, along with a solid educational background in Computer Science. This is a fantastic opportunity to contribute to critical security initiatives within a dynamic environment, ensuring compliance with national standards and protecting sensitive information.

Qualifications

• 5+ years of experience as an ISSO required, with knowledge of security tools.
• Bachelor's degree in Computer Science or related discipline is mandatory.

Responsibilities

• Support for information systems security policies and standards.
• Conduct vulnerability assessments and maintain operational security posture.

Skills

Information Systems Security

Vulnerability/Risk Assessment

Configuration Management

Security Policy Development

Operational Security Management

Documentation Preparation

Education

Bachelor's degree in Computer Science

DoD 8570 compliance with IAT Level I

Tools

Security Tools

Encryption Techniques

Job description

(U) Provides support for a program, organization,
system, or enclave’s information assurance
program. Provides support for proposing,
coordinating, implementing, and enforcing
information systems security policies, standards,
and methodologies. Maintains operational
security posture for an information system or
program to ensure information systems security
policies, standards, and procedures are
established and followed. Assists with the
management of security aspects of the
information system and performs day-to-day
security operations of the system. Evaluate
security solutions to ensure they meet security
requirements for processing classified
information. Performs vulnerability/risk
assessment analysis to support certification and
accreditation. Provides configuration
management (CM) for information system
security software, hardware, and firmware.
Manages changes to system and assesses the
security impact of those changes. Prepares and
reviews documentation to include System
Security Plans (SSPs), Risk Assessment Reports,
Certification and Accreditation (C&A) packages,
and System Requirements Traceability Matrices
(SRTMs). Supports security authorization
activities in compliance with National Institute of
Standards and Technology Risk Management
Framework (NIST RMF).

• Salary Range: $115,000-$155,000

REQUIREMENTS:

• (U) Provide support to senior ISSOs for implementing, and enforcing information systems security
  policies, standards, and methodologies
• (U) Assist with preparation and maintenance of documentation
• (U) Assist in the evaluation of security solutions to ensure they meet security requirements for
  processing classified information
• (U) Assist with the CM for information system security software, hardware, and firmware
• (U) Maintain records on workstations, servers, routers, firewalls, intelligent hubs, network
  switches, etc. to include system upgrades
• (U) Propose, coordinate, implement, and enforce information systems security policies, standards,
  and methodologies
• (U) Develop and maintain documentation for C&A in accordance with ODNI and DoD policies
• (U) Provide CM for security-relevant information system software, hardware, and firmware
• (U) Develop system security policy and ensures compliance
• (U) Evaluate security solutions to ensure they meet security requirements for processing classified
  information
• (U) Maintain operational security posture for an information system or program
• (U) Provide support to the Information System Security Manager (ISSM) for maintaining the
  appropriate operational IA posture for a system, program, or enclave
• (U) Develop and update the system security plan and other IA documentation
• (U) Assist with the management of security aspects of the information system and perform day-to-day security operations of the system
• (U) Administer the user identification and authentication mechanism of the Information System (IS)

QUALIFICATIONS:

LEVEL1:

(U) Five (5) years experience as an ISSO on programs and contracts of similar scope, type, and
complexity is required. Experience is to include at least one (1) of the following areas: knowledge of
current security tools, hardware/software security implementation; communication protocols; and
encryption techniques/tools. Bachelor’s degree in Computer Science or related discipline from an
accredited college or university is required. DoD 8570 compliance with IAT Level I or higher is
required. Four (4) years of additional experience as an ISSO may be substituted for a bachelor’s degree.

LEVEL2:

(U) Ten (10) years experience as an ISSO on programs and contracts of similar scope, type, and
complexity is required. Experience is to include at least two (2) of the following areas: knowledge of
current security tools, hardware/software security implementation; communication protocols; and
encryption techniques/tools. Bachelor’s degree in Computer Science or related discipline from an
accredited college or university is required. DoD 8570 compliance with Information Assurance
Management (IAM) Level I or higher is required. Four (4) years of additional experience as an ISSO
may be substituted for a bachelor’s degree.