What are the responsibilities and job description for the Information Systems Security Officer (ISSO) position at Modern Technology Solutions, Inc. (MTSI)?
MTSI is seeking an Information Systems Security Officer (ISSO) to support a high-profile Air Force program at Joint Base Anacostia-Bolling Air Force Base, DC, or Wright Patterson Air Force Base, OH. This position requires travel of up to 20%, as directed by the Government. The ISSO will be responsible for managing the security aspects of an information system and performing day-to-day security operations, including physical and environmental protection, personnel security, incident handling, and security training and awareness.
The ISSO will collaborate closely with the ISSM and ISO to monitor information system(s), maintain security controls, and ensure compliance with authorization documentation. Responsibilities also include implementing configuration management across authorization boundaries, assessing the security impact of those changes, and making recommendations to the ISSM.
Responsibilities
The ISSO will collaborate closely with the ISSM and ISO to monitor information system(s), maintain security controls, and ensure compliance with authorization documentation. Responsibilities also include implementing configuration management across authorization boundaries, assessing the security impact of those changes, and making recommendations to the ISSM.
Responsibilities
- Assist the ISSM in meeting their duties and responsibilities.
- Prepare, review, and update authorization packages.
- Ensure approved procedures are in place for clearing, sanitizing, and destroying hardware and media.
- Notify the ISSM of any changes that may affect the authorization determination of the information system(s).
- Conduct periodic reviews of information systems to verify compliance with the security authorization package.
- Coordinate changes or modifications to hardware, software, or firmware of the system with the ISSM and AO/DAO prior to implementation.
- Monitor system recovery processes to verify proper restoration of security features and procedures.
- Maintain current and accessible IS security-related documentation for authorized personnel.
- Collect, review, and document audit records, including any anomalies.
- Attend technical and security training relevant to assigned duties (e.g., operating system, networking, security management).
- Execute the cybersecurity portion of the self-inspection, including providing security coordination and review of system assessment plans.
- Identify cybersecurity vulnerabilities and assist in implementing countermeasures.
- Prepare reports on the status of security safeguards applied to computer systems.
- Perform ISSO duties to support both in-house and external customers.
- Conduct security impact analysis activities and report them to the ISSM for all configuration management changes within the authorization boundaries.
- 5 years of relevant experience is required; 7 years is highly desired.
- Demonstrated performance in roles such as System Administrator, Network Administrator, or ISSO.
- Bachelor’s degree in a related discipline.
- Equivalent experience (4-6 years) may be substituted in lieu of a degree.
- Must meet the position and certification requirements outlined in DoD Directive 8140 for Information Assurance Manager Level II or Information Assurance Architect and Engineer Level I.
- Active TS/SCI
- 2 years of experience with Special Access Programs (SAP).
- Experience with enterprise IT systems is highly desired.
- Strong understanding of cybersecurity principles, practices, and industry standards.