Information Systems Security Officer (ISSO)

Science and Engineering Services, LLC; Huntsville (AL); On-site; USD 90,000 - 120,000; Full time

Job summary

Science and Engineering Services, LLC is seeking an Information Systems Security Officer (ISSO) to oversee security for classified lab environments. The role emphasizes policy implementation, documentation, and liaison with security authorities to maintain compliance with NISPOM and RMF.

The candidate will conduct risk assessments, coordinate security audits, and respond to incidents while updating SOPs and technical documentation. A background in DoD information security is required.

Qualifications

• Experience with DoD security requirements.
• Experience implementing and auditing NIST controls.
• Experience conducting vulnerability assessments and configuration checks.
• 3+ years as Security Analyst for government systems.

Responsibilities

• Review, implement, and document security policies and procedures for classified lab environments.
• Manage security audits, vulnerability assessments, and risk management activities.
• Direct responses to intrusions and ensure compliance with NISPOM and RMF.
• Prepare and maintain technical documentation and SOPs.
• Support site accreditation/reaccreditation efforts and risk documentation.

Skills

Cybersecurity

DoD requirements

NIST controls

RMF knowledge

Vulnerability assessment

Education

Bachelor's degree preferred

High School Diploma or GED required

Tools

NIST 800-53

RMF tooling

Job description

The Information Systems Security Officer (ISSO) will be responsible for reviewing, implementing, updating and documenting Classified lab’s information, security policies and procedures, managing security audits, vulnerability and threat assessments, directing responses for system intrusions, and ensuring fulfillment of legal and contractual information security and privacy mandates, preventing and detecting intrusion.

• Demonstrate a strong knowledge of cybersecurity principles and DoD requirements relevant to the confidentiality, integrity, availability and authentication of systems operating in a classified environment
• Ensure compliance with the Chapter 8 regulatory requirements of the with National Industrial Security Program Operating Manual (NISPOM)
• Applies current computer science technologies to the development, evaluation, and integration of computer systems and networks to maintain system security for classified information systems. Primary liaison to the local Defense Counterintelligence and Security Agency (DCSA) Information Systems Security Professional (ISSP) on all matters pertaining to classified information systems
• Propose, coordinate, implement, and enforce information systems security policies, standards, and methodologies
• Support the development and maintenance of technical documentation and standard operating procedures (SOPs)
• Execute the security assessment and authorization process for Risk Management Framework (RMF) requirements
• Support the Security Manager with site accreditation/reaccreditation process
• Perform updates to Risk Management Framework accreditation documentation for assigned systems
• Prepare and submit classified spillages/incident responses
• Performs other duties as assigned

Education

• High School Diploma or GED required; Bachelor’s Degree preferred

Experience

• Three years of relevant work experience as a Security Analyst to include; developing, editing, and auditing cyber security policies, plans, and procedures for government systems and programs
• Knowledge and experience working with NIST security controls and regulations required
• Experience conducting vulnerability audits, security configuration checks, and system configuration scans to meet Cyber Security requirements required

Any combination of education/experience may be substituted for job requirements at the recommendation of the hiring manager and approval of the COO or higher.