What are the responsibilities and job description for the Information System Security Officer (ISSO) III position at Strategic Data Systems?
Position: ISSO III
Location: NSWC Philadelphia Division, Philadelphia, PA
Salary Negotiable - Full time with benefits - Offer contingent upon contract award
The Naval Surface Warfare Center Philadelphia Division (NSWCPD) is a Department of Defense entity focused on research and development, test and evaluation, engineering, and fleet support for the Navy’s ships, submarines, military watercraft, and unmanned vehicles. SDS seeks a knowledgeable Information System Security Officer (ISSO) to join NSWCPD Code 104, which oversees the Information Technology Operations Division, providing cybersecurity and information assurance support for the Navy Marine Corp Intranet (NMCI) Network and associated Business Systems.
The ISSO III will be responsible for the development, monitoring, and execution of the Cybersecurity Program in support of Code 104. This includes managing the DoD Information Assessment and Authorization (A&A) process and implementing Risk Management Framework (RMF) services. The candidate will develop and enforce cybersecurity policies, review A&A artifacts, conduct A&A validation, and ensure the implementation of appropriate security postures across various systems. The ISSO III will provide subject matter expertise in cybersecurity lifecycle management, coordinate the sustainment of labs under RMF, and support organizational incident response efforts.
\n- Develop, implement, and maintain the Cybersecurity Program in accordance with DoD guidelines.
- Coordinate and enact necessary security changes to ensure compliance with published policies at various organizational levels.
- Conduct cybersecurity vulnerability and threat analyses, providing actionable insights and recommendations.
- Support cyber incident responses, including isolating potentially affected assets and conducting initial investigations and data collection.
- Perform ongoing reviews of A&A artifacts, ensuring that all documentation meets compliance requirements.
- Validate A&A processes and ensure that security postures are effectively implemented and sustained.
- Collaborate with various teams to coordinate the implementation and operation of labs under RMF.
- Provide training and support to staff on cybersecurity best practices and policies
- Bachelor’s degree in computer science, information technology, communications systems management, or an equivalent science, technology, engineering, and mathematics (STEM) degree from an accredited college or university.
- A minimum of six (6) years of experience in coordinating and executing required security changes, ensuring compliance with organizational policies.
- Extensive experience conducting cybersecurity vulnerability assessments, threat analyses, and supporting cyber incident response activities.
- DoD 8570 IAM II Certification
- Strong analytical and problem-solving skills to assess cybersecurity issues and recommend solutions.
- Excellent communication skills for conveying complex information effectively to various audiences.
- In-depth knowledge of cybersecurity principles, policies, and best practices.
- Familiarity with the DoD A&A process and RMF guidelines.
Strategic Data Systems provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training
