What are the responsibilities and job description for the ISSO SME position at Noetic Strategies, Inc.?
Information System Security Officer (ISSO) – SME
Location: Huntsville, AL (HSV)
Summary
Noetic is seeking an Information System Security Officer (ISSO) – Subject Matter Expert (SME) to support the implementation, oversight, and maintenance of information system security configurations, controls, practices, and procedures. The ISSO will serve as a principal security advisor to system owners and information security leadership, ensuring systems maintain appropriate security controls and supporting the Authority to Operate (ATO) documentation and accreditation process.
Primary Responsibilities
Location: Huntsville, AL (HSV)
Summary
Noetic is seeking an Information System Security Officer (ISSO) – Subject Matter Expert (SME) to support the implementation, oversight, and maintenance of information system security configurations, controls, practices, and procedures. The ISSO will serve as a principal security advisor to system owners and information security leadership, ensuring systems maintain appropriate security controls and supporting the Authority to Operate (ATO) documentation and accreditation process.
Primary Responsibilities
- Serve as the principal advisor to the Information System Owner (SO), Business Process Owner, Chief Information Security Officer (CISO), and Information System Security Manager (ISSM) on matters related to information system security.
- Ensure the implementation and ongoing maintenance of required security controls.
- Direct and implement security controls and procedures to protect information system assets from intentional or inadvertent modification, disclosure, or destruction.
- Provide guidance to other functional units regarding the physical protection of information system assets.
- Report on the effectiveness of data security measures and recommend new or improved security procedures.
- Assist with reviewing, developing, and navigating system teams and customers through the Authority to Operate (ATO) accreditation and certification documentation process.
- Perform network self-inspections to assess compliance with applicable security requirements.
- Create and update documentation required for the ATO package, including the System Security Plan (SSP) and Information System Contingency Plan.
- Develop Plans of Action and Milestones (POA&Ms) based on vulnerability data and enter findings into the designated system of record.
- Bachelor of Science (B.S.) or Bachelor of Arts (B.A.) degree.
- Experience implementing, overseeing, and maintaining security configurations, practices, and procedures for information systems.
- Excellent verbal and written communication skills.
- Strong interpersonal skills.
- Experience with Xacta.
- CISSP or a CompTIA certification.