Senior Information System Security Officer

Job Summary:

The Senior Information System Security Officer (Sr. ISSO) will assist in preparation, development, and maintenance of specialized Information Systems (IS) security plans used to obtain/retain DCSA accreditation.

Essential Duties and Responsibilities:

May include the following. Other duties may be assigned.

• Review and revise IS system plans documentation based on analysis of the existing equipment configuration. Document any changes or special security requirements.
• Provide day-to-day technical support to classified IS including adherence to policies, procedures, and best practices.
• Oversee the system compliance, and auditing of the information systems.
• Oversee the information systems readying system configurations for ISSM certification and/or DCSA accreditation/assessment.
• Assist with the design, develop, and implement annual IS security training for the end-users. Similar but specialized training will also be given to the Data Transfer Agents DTAs and SAs annually.
• Assist the SAs in the implementation and validation of security relevant controls on computing systems; network devices such as switches, routers and firewalls; SAN storage; and virtualization hosts and any virtualized systems and appliances.
• Assist in spill containment and cleanup.
• Participate in investigations relating to any IS security violations and provide "lessons learned" information to the IS community to prevent reoccurrence.
• Assist the Information Systems Security Manager (ISSM) and implement information systems security tasks, as required for safeguarding, handling, and controlling of classified materials, documents and equipment. Knowledgeable in information systems security in order to assure enforcement of company and government regulations.
• Knowledge of National Industrial Security Program Operating Manual (NISPOM), DCSA Assessment and Authorization Process Manual (DAAPM), DCSA Assessment and Authorization Guide (DAAG) and Risk Management Framework is required.

Supervisory Responsibilities:

• This job has no supervisory responsibilities.

Competencies:

To perform the job successfully, an individual should demonstrate the following competencies:

• Problem Solving - Identifies and resolves problems in a timely manner; Gathers and analyzes information skillfully.
• Project Management - Communicates changes and progress.
• Technical Skills - Pursues training and development opportunities; Strives to continuously build knowledge and skills.
• Ability to work independently and as a member of a team.
• Oral/Written Communication - Listens and gets clarification; Responds well to questions; Records data; Writes clearly and informatively; Able to read and interpret written information.
• Perform well; Accepts feedback from others; Gives appropriate recognition to others.
• Change Management - Develops workable implementation plans; Communicates changes effectively.
• Business Acumen - Understands business implications of decisions.
• Ethics - Treats people with respect.
• Organizational Support - Follows policies and procedures; Supports organization's goals and values.
• Judgment - Includes appropriate people in decision-making process.
• Motivation - Demonstrates persistence and overcomes obstacles.
• Planning/Organizing - Prioritizes and plans work activities; Uses time efficiently.
• Professionalism - Approaches others in a tactful manner; Reacts well under pressure; Accepts responsibility for own actions; Follows through on commitments.
• Quality - Demonstrates accuracy and thoroughness; Looks for ways to improve and promote quality; Applies feedback to improve performance; Monitors own work to ensure quality.
• Quantity - Completes work in timely manner; Strives to increase productivity.
• Safety and Security - Observes safety and security procedures including using Personal Protective Equipment (PPE) as required and wearing company issued badge when on company property; Reports potentially unsafe conditions; Uses equipment and materials properly.
• Adaptability - Adapts to changes in the work environment; Able to deal with frequent change, delays, or unexpected events.
• Initiative - Seeks increased responsibilities; Asks for and offers help when needed.
• Innovation - Generates suggestions for improving work.

Qualifications:

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Education and/or Experience:

• Bachelor's degree (B.S.) from four-year college or university in a related field, such as computer science, information systems, engineering, or other technical disciplines involving information systems.
• 15+ years of relevant experience.

Computer Skills:

• Will have knowledge of Windows based (Desktop and Server) operating systems, Red Hat Linux based operating systems and their peripherals are required.
• Knowledgeable in information systems security in order to assure enforcement of company and government regulations.
• Experience interpreting, implementing, and assessing DISA STIGs.
• Knowledge of NISPOM, DAAPM and Risk Management Framework (RMF).
• Microsoft Office Suite (i.e., Outlook, Word, Access, Excel, PowerPoint, Project, Visio, etc.)
• Supported and configured Security Information and Event Management (SIEM) tools

Other Essential Duties:

• Follows all import/export requirements, consulting with facility import/export personnel as required.

Other Skills and Abilities:

• Must have obtain and maintain an Intermediate cybersecurity certification Security+ or equivalent on the DoD 8140.
• CISSP, CISM, GSLC, CASP, CCISO or any advanced level certification required on the DoD 8140 within one year of hire.
• A Linux+, Network+ or other similar certifications are preferred but not required.

Other Qualifications:

• Applicant must have a current security clearance and be able to obtain a Secret clearance.
• Ability to travel (domestically/internationally) approximately +/-10%.