Associate Information System Security Officer

Job Summary:

The Associate Information System Security Officer (ISSO) will assist in preparation, development, and maintenance of specialized Information Systems (IS) security plans used to obtain/retain DCSA accreditation.

Essential Duties and Responsibilities:

May include the following. Other duties may be assigned.

• Oversee the system compliance and auditing of the information systems.
• Review and revise IS system plan documentation based on analysis of the existing equipment configuration. Document any changes or special security requirements.
• Oversee and manage the implementation of cybersecurity products that might include a SIEM tool, vulnerability scanner, endpoint security, DLP, and others.
• Assist with the deployment and sustainment of continuous monitoring requirements on the IS.
• Provide day-to-day technical support to classified IS, including adherence to policies, procedures, and best practices.
• Review and map evidence from applicable security requirement sources, including STIGs, DISA guidance, and customer requirements, within the SCTM and RMF evidence package.
• Assist with the design, development, and implementation of annual IS security training for end-users, and similar specialized training for Data Transfer Agents (DTAs) and SAs annually.
• Assist in drafting procedures for the protection of the information system.
• Assist in spill containment and cleanup.
• Partner and work with Government agencies, including the Department of War (DoW) and other relevant agencies, on information security matters.
• Participate in investigations relating to IS security violations and provide lessons learned information to the IS community to prevent reoccurrence.
• Communicate security risks and solutions to business partners and IT staff as needed.
• Assist the Information Systems Security Manager (ISSM) and implement information systems security tasks for safeguarding, handling, and controlling classified materials, documents, and equipment.
• Attend cybersecurity events and participate in external cybersecurity activities to stay current in the field.
• Knowledge of NISPOM, DCSA Assessment and Authorization Process Manual (DAAPM), DCSA Assessment and Authorization Guide (DAAG), and Risk Management Framework is required.
• Respond to emergencies and remediate information security incidents.

Supervisory Responsibilities:

This job has no supervisory responsibilities.

Competencies:

To perform the job successfully, an individual should demonstrate the following competencies:

• Problem Solving, Project Management, Technical Skills, Oral/Written Communication, Teamwork, Leadership, Change Management, Business Acumen, Ethics, Organizational Support, Judgment, Motivation, Planning/Organizing, Professionalism, Quality, Quantity, Safety and Security, Adaptability, Initiative, and Innovation.

Qualifications:

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Education and/or Experience:

• Bachelor's degree (B.S.) from a four-year college or university in a related field and 0-2 years of information technology experience with a cybersecurity focus and/or training; or equivalent combination of education and experience.

Language Skills:

• Strong interpersonal skills.
• Strong oral and written communication abilities with all levels of management, employees, and customers.
• Ability to translate security situations and postures into business objectives and outcomes.

Mathematical Skills:

• Ability to add, subtract, multiply, and divide using whole numbers, common fractions, and decimals.
• Ability to compute rate, ratio, and percent.

Reasoning Ability:

Develops solutions to a variety of complex problems. Demonstrates judgment and discretion in working with sensitive information and confidential matters.

Computer Skills:

• Ability to learn and adapt to new technologies.
• Full knowledge and thorough understanding of automated vulnerability scanning tools, forensic tools, Windows and other operating systems, information security architecture, systems design, integration of systems, and networking.
• Microsoft Office Suite (Outlook, Word, Access, Excel, PowerPoint, Project, Visio, etc.).
• Knowledgeable in information systems security to assure enforcement of company and government regulations.

Other Essential Duties:

• Follow all import/export requirements, consulting with facility import/export personnel as required.

Other Skills and Abilities:

• Within 1 year of hire, obtain and maintain a cybersecurity certification such as Security+ or equivalent.

Other Qualifications:

• US citizenship with ability to attain/maintain government security clearance.
• Ability to travel domestically/internationally approximately 5%.