Information Systems Security Officer (ISSO)

Job Description

Job Description

Description :

Athenix Solutions Group is looking for multiple Information Systems Security Officers for a large program in the Annapolis Junction, MD area. The ISSO will be responsible for ensuring that the appropriate operational security posture is maintained for an information system and as such, works in close collaboration with the information system owner. They will also serve as a principal advisor on all matters, technical and otherwise, involving the security of an information system. The ISSO has the detailed knowledge and expertise required to manage the security aspects of an information system and is assigned responsibility for the day-to-day security operations of a system. This responsibility may also include, but is not limited to, physical and environmental protection, personnel security, incident handling, and security training and awareness. They could be called upon to assist in the development of the security policies and procedures and to ensure compliance. In close coordination with the information system owner, the ISSO will play an active role in the monitoring of a system and its environment of operation to include developing and updating the security plan, managing and controlling changes to the system, and assessing the security impact of those changes.

Responsibilities :

• Understand and apply knowledge of National level Security Policies to include : Intelligence Community Directive (ICD) 503, National Institute of Standards and Technology (NIST) 800 Series
• Understand and apply knowledge of Roles and responsibilities of the Information Technology (IT) Security Manager / Information System Security Manager (ISSM) for maintaining the appropriate operational security posture
• Prepare and maintain Certification and Authorization (C&A) documentation
• Maintain the operational security posture for an information system
• Interact with Customers, Information Technology (IT) Staff, Information System Security Manager (ISSM), Information Owner, Information System Owner, and Designated Authorizing Official (DAO) in written and verbal communications
• Perform assigned tasks in a timely manner within an unsupervised environment
• Understand and apply knowledge of National level Security Policies to include : Committee on National Security Systems (CNSS) 1253
• Support the Information System Security Manager (ISSM) for maintaining the appropriate operational Information Assurance (IA) posture
• Effectively use of COTs / GOTs Enterprise Security tools in support of continuous monitoring
• Interact with additional resources including Security Control Assessor (SCA) and Information System Security Engineer (ISSE) in written and verbal communications
• Enforce the Information Security Policies, Standards, and methodologies which includes the following NIST control families : Access Control, Audit and Accountability, Configuration Management and Incident Response
• Participate in Configuration Management process (software, hardware and firmware)
• Manage and control changes to the system and assessing the security impact of these changes
• Evaluate technical solutions to ensure compliance with security requirements and controls
• Plan and coordinate IT security programs and policies
• Manage and control changes to the system and assess the security impact of those changes
• Obtain C&A for IS's under their purview
• Provide support for a program, organization, system, or enclave's information assurance program

Requirements :

All openings require a TS / SCI with polygraph clearance to start.

The Level 1 Information Systems Security Officer (ISSO) shall possess the following capabilities :

The Level 2 Information Systems Security Officer (ISSO) shall possess the following capabilities :

The Level 3 Information Systems Security Officer (ISSO) shall possess the following capabilities :

Equal Opportunity Employer, including disability and protected veteran status.