Develop and maintain documented end to end Information Assurance (IA) Operations processes and standard operating procedures across CIO that streamline AO/DAO approvals and establish Information Technology security standards for the region in accordance with current DOD and IC policy guidance.

Responsibilities

• Assist in centralization of A&A files/documentation and maintain files/library; ensure validity and integrity of all systems.
• Create, update, and delete entries in databases utilized for the tracking of system and network compliance.
• Ensure that all IA systems are properly documented with Configuration Management processes.
• Maintain the security accreditation status of systems/sites including the review of current documentation, site architectures and coordination with sites to ensure the documentation is accurate with the current site architecture, IAW DIA Policies and Processes.
• Perform, participate and support all assessment and authorization (A&A) efforts for systems, networks, and applications (all security domains) IAW DoD and IC requirements.
• Provide coordination for assessment metric submissions.
• Provide direct support in PM’s development of other A&A related systems bodies of evidence in accordance with current NIST, ICD, DIAD guidance, using the government provide A&A tool (e.g. XACTA).
• Provide security engineering assessments of proposed IT solutions.
• Provide weekly A&A metrics and reports
• Work in coordination with both internal and external systems administrators, configuration management, and network engineers to ensure proper configuration and adherence to security standards in regard to development actions.
• Provide guidance on the application of security policy, identifying security requirements, providing technical guidance for the satisfaction of requirements, reviewing and determining the adequacy of required documentation,
• Development of all supporting test reports and supporting artifacts and plan and action of milestones (POA&Ms) documenting open findings, preparation of formal authorization packages and oversight of the resolution of POA&Ms and development and maintenance of assessment and authorization enter rise schedules and metrics.
• The ISSO will assist Software Engineers and System administrator for A&A System of Record shall maintain the system and keep up to date on versioning, patching and anti-virus.

Qualifications

Awareness and understanding of the following:

• Intelligence Community and Department of Defense policy issuances such as
• Policy, Instructions, Manuals, Memorandums, Standards, and other issuance like documents.
• Risk Management Framework as described in NIST Directives, CNSSI 1253A and ICD- 503
• Federal laws, specifically pertaining to IT, Cyber Security, FISMA, and Intelligence.
• Information System Security Officers Roles and Responsibilities
• Ability to communicate both written and orally at a level sufficient for senior executive level leadership interaction;
• Ability to review, understand, and comprehend complex qualitative and quantitative IT and IA related metrics;
• Ability to provide local IA training & Education support;
• Understanding IA operations & Continuous Monitoring;
• Ability to collect, analyze, track and disseminate IA requirements on behalf of the CISO;
• Understanding of the implement and enforcement requirements for Security policy, processes, and training;
• Ability to coordinate and collaborate with service certifying officials and site ISSMs

Requirements

• Bachelor’s degree in Computer Science, Cyber Security, Information Assurance, or a related technical discipline with 5 years of experience with IT security policy and procedure; an additional 4 years of experience may be substituted for a degree
• Minimum DoD 8570 IAM Level I / IAT II Certification.