What are the responsibilities and job description for the Information Systems Security Office (ISSO) position at Mission Essential?
The Mission Essential Group, LLC (MEG), is a premier service provider of information management solutions for complex, mission-critical needs. MEG has earned a reputation as an innovator and pioneer. Headquartered in Fairfax, VA, MEG employs professionals in offices located throughout the United States and around the world. MEG offers a competitive benefits package including a competitive salary; medical, dental, vision, life and disability insurance; paid time off; and retirement benefits.
MEG is a leading provider of Information Management system engineering, software development, information assurance, system sustainment and is the primary provider of technical support for the Integrated Broadcast Service (IBS) Enterprise. IBS is the worldwide Department of Defense (DoD) joint program for transporting intelligence, surveillance & reconnaissance (ISR) and targeting data to all levels of tactical and strategic operational users.
IBS provides global, 24/7, dissemination of time sensitive Indications & Warning and Force Protection data to Joint Warfighters and Collaborating Nation partners conducting military operations around the world. MEG serves a vital role in supporting the IBS Enterprise, providing continuity in skills crucial to support military operations. MEG integrates the talents and skills of team members to form an IBS Enterprise Support Services Team to provide world-class IBS customer support.
The Information Systems Security Officer (ISSO) is a hands-on position that requires knowledge of information assurance principles and regulatory guidance to develop, certify, accredit, and maintain information systems that are integral to our customers, our business, and the success of our security program. The position is located at the company Headquarters in Fairfax, VA. Duties and responsibilities include but are not limited to:
Duties and Responsibilities:
- Provide input in developing and maintaining company and customer IT architectures.
- Support the development, implementation, and management of a formal Information Security/Information Systems Security Program.
- Contribute to the development and maintenance of Information Systems. Security/Education/Training/Awareness (SETA) program.
- Assist with the development, implementation, and enforcement of Information Security Policies and Procedures.
- Prepare, review, and oversee all Information Systems Security Plans (SSP’s) and the Certification/Accreditation of each (IATO’s and ATO’s).
- Help coordinate Information Security Inspections and Incident Response.
- Ensure proper Protection and/or Corrective Measures have been taken when an Incident or Vulnerability has been discovered.
- Perform Risk Assessments.
- Conduct regular audits of systems; reviews event logs to detect security issues.
- Apply patches to systems.
- Support the maintenance of software applications, hardware, and specialized tools.
- Conduct investigations and develop investigative reports when needed.
- Provide training to system users on IS Security policies and procedures.
- Research new technology and stay current with regulatory updates and releases.
- Works in concert with the Facility Security Officer as required.
- Liaisons with client and oversight agency security authorities.
Minimum Qualifications:
- Requires an Active Top-Secret Clearance and must be able to obtain SCI
- Ability to maintain a US Government security clearance
- Bachelor’s Degree in a related field or corresponding certification
- Minimum of 3 years of ISSO experience
- Working knowledge of Information Security governing regulations (NISPOM Chapter 8, ICD-503, JAFAN, NIST 800-53, and ODAA Process Manual)
- Extensive knowledge and administration of Windows based environments
- Practical knowledge of security technologies (encryption, data protection, privileged access)
- CompTIA Security Certified
Desired Experience:
- CISSP or CISM Certified
- Defense Security Service (DSS) Chapter 8 Certification
- Experience working with classified networks.
- Experience with network engineering.