ISSO - Classified Systems & RMF Security Lead

The Chronicle Of Higher Education, Inc.; Wichita (KS); On-site; Full time

Job description

Department: IDP Information Technology Center

Campus Location: Wichita, KS - WSU Main Campus

Hire Type: Full Time

Pay: Commensurate with experience

Work Schedule: Typically, 8am – 5pm, Monday – Friday.Evenings and weekends may be required dependent upon businessneeds. The job is performed in person and on-site in Wichita,KS.

Export Compliance Requirement: This position requires accessto EAR or ITAR controlled technologies. Applicants are required tobe eligible for employment under U.S. export control laws and mustmeet the requirement of being a “U.S. Citizen”.

Job Information

The Information Systems Security Officer (ISSO) plays a criticalrole in securing and maintaining a classified information systemsupporting a U.S. Federal Government program. Based on-site atWichita State University’s main campus, this full‑time role isresponsible for developing and managing the System Security Package(SSP), ensuring compliance with Federal and DoD cybersecurityrequirements, and supporting the Authorization to Operate (ATO)lifecycle. The ISSO collaborates closely with internal teams andgovernment partners to implement security controls, conduct systemassessments, and ensure the protection and proper handling ofclassified information. This position requires eligibility underU.S. export control laws and the ability to obtain and maintain aU.S. Government security clearance.

Job Summary

The Information Systems Security Officer (ISSO) is responsible fordeveloping, implementing, and maintaining the System SecurityPackage (SSP) and all associated documentation required to supportan Authorization to Operate (ATO) for a classified informationsystem supporting a U.S. Federal Government program. This roleensures the system is built, configured, operated, and maintainedin accordance with applicable Federal and Department of Defense(DoD) security requirements.

Essential Functions

Develops, maintains, and updates the System Security Package (SSP)and all related documents required for an ATO.
Implements and manages security controls in accordance with theRisk Management Framework (RMF) for DoD and Federal InformationSystems.
Coordinates with the Information System Owner (ISO), FacilitySecurity Officer (FSO), and Government security representativesthroughout the ATO lifecycle.
Conducts system security assessments, vulnerability remediation,and continuous monitoring activities.
Manages configuration control, change management, and securityimpact analyses for the classified system(s).
Ensures compliance with policies, directives, and standards.
Supports classified system operations including accreditation,audits, inspections, security testing, and system upgrades.
Prepares and delivers required security documentation, incidentreports, POA&Ms, and system updates;
Provides security guidance to internal and external partners andensures classified system activity complies with governmentpolicies for protection, handling, and safeguarding of classifiedinformation.

Required Education and Experience:

• High school diploma or equivalent
• Six (6) years of related experience in information technologyor cybersecurity; every 30 hours of related college coursework maybe substituted for one (1) year of experience, up to four (4)years.

Knowledge, Skills and Abilities:

• Experience supporting RMF, ATO processes, or classifiedinformation systems (DoD, DOE, or IC environments).
• Familiarity with NIST SP 800 53 security controls and DoD/ICcyber requirements.
• Ability to obtain and maintain a U.S. Government securityclearance.
• Strong technical understanding of system administration,networks, vulnerability management, and secure configuration.
• Excellent documentation, coordination, and communicationskills.
• Strong analytical and critical thinking skills, with attentionto detail and compliance requirements.

Preferred Qualifications:

• Experience as an ISSO, ISSM, System Administrator, orCybersecurity Analyst on a classified system.
• Industry certifications such as Security+, CISSP, CAP, or otherDoD 8570/8140 recognized credentials.
• Experience with SAP/SAR environments, SCGs, and classifiedfacility operations.

Preferred License/Certifications/Training:

• Active or previous U.S. Government security clearance.

Physical Requirements:

Ability to communicate with others and accurately exchangeinformation.
Ability to operate a computer and other office equipment includingbut not limited to phone, printers, copiers, and calculators.
Ability to remain in a stationary position.
Ability to interpret effectively, accurately and impartially, bothreceptively and expressively.