Information Systems Security Officer (ISSO)

Cape Fox Shared Services; Great Falls Crossing (VA); On-site; USD 80,000 - 110,000; Full time

Job summary

An established industry player is seeking a skilled Information Systems Security Officer (ISSO) to support government operations. In this pivotal role, you will be responsible for implementing and sustaining information security compliance, ensuring the protection of sensitive data against unauthorized access. Your expertise will guide the development of security protocols and the management of security incidents. This position offers an opportunity to work closely with a dedicated team, contributing to vital national security initiatives while maintaining the highest standards of information security. If you are passionate about safeguarding information systems and thrive in a dynamic environment, this role is perfect for you.

Qualifications

• Experience with DoD/NIST RMF+ requirements.
• Knowledge of security controls and incident handling.

Responsibilities

• Conduct research and implement information security measures.
• Monitor systems and coordinate security measures with the team.

Skills

Information Security

Risk Management Framework (RMF)

DoD/NIST Compliance

Incident Handling

Security Training

Education

Bachelor's Degree in Information Technology or related field

IA Certifications (e.g., Security+, CISSP)

Tools

Security Authorization Package

System Security Plan (SSP)

Job description

Information Systems Security Officer (ISSO)

Work Location: Reston, VA; work may also be performed at locations in the Washington, DC National Capital Region (NCR) (i.e., The District of Columbia; Arlington, Fairfax, Loudon, Prince William, and Stafford counties in VA (including incorporated cities) and Prince George and Montgomery Counties in Maryland) and at additional CONUS Government locations to meet support of combatant commanders, as needed.

The DIA SCS has a requirement for A&AS support to provide independent and objective services for the implementation and sustainment of SCS sensor system information security compliance, and Tasking, Collection, Processing, Exploitation, and Dissemination (TCPED) systems information security compliance. SCS has a requirement to support independent reviews, analyses, and inputs for complex technical SDA TCPED systems, current and future IT initiatives, information security best practices, and advancements in accordance with the DIA Risk Management Framework (RMF).

Cape Fox is seeking a highly qualified Information Systems Security Officer (ISSO) to join our team in support of a government customer. The ISSO will be responsible for providing the knowledge, skills, abilities, staff support, and other related resources necessary to conduct or support the following RMF-related services: prepare, categorize information systems, select security controls, implement security controls, assess security controls, provide recommendations to the authorizing official, monitor security controls, and other RMF-related services.

Core Duties:

1. Conduct research, develop, implement, test, and review the application of information security in accordance with DoD/NIST RMF+ requirements to protect information and prevent unauthorized access.


2. Coordinate with the contractor team regarding security measures, explain potential threats, implement security measures, and monitor applications to meet or exceed all DoD/NIST RMF+ requirements, resulting in faster and more accurate software releases.


3. Responsibilities also include physical and environmental protection, personnel security, incident handling, and security training and awareness.


4. In close coordination with the Information System Security Manager (ISSM) and Information System Owner (ISO), the ISSO actively monitors the system and its environment of operation, develops and updates the System Security Plan (SSP), manages changes to the system, and assesses the security impact of those changes.


5. Ensure the appropriate operational security posture is maintained for an information system, working closely with the ISSM and ISO.


6. Ensure systems are operated, maintained, and disposed of in accordance with security policies and procedures outlined in the security authorization package.


7. Attend required technical and security training (e.g., operating system, networking, security management) relevant to assigned duties.


8. Maintain required IA certifications.


9. Ensure all users have the requisite security clearances, authorization, need-to-know, and are aware of their security responsibilities before granting access to the Information System (IS).


10. Report all security-related incidents through appropriate channels.


11. Conduct periodic reviews of information systems to ensure compliance with the security authorization package.


12. Coordinate any changes or modifications to hardware, software, or firmware of a system with the ISSM and AO/DAO prior to the change.


13. Formally notify the ISSM and AO/DAO when changes occur that might affect system authorization.


14. Monitor system recovery processes to ensure security features and procedures are properly restored and functioning correctly.


15. Ensure all IS security-related documentation is current and accessible to authorized individuals.


16. Ensure audit records are collected, reviewed, and documented, including any anomalies.