Information System Security Officer

PURPOSE OF POSITION

Responsible for ensuring the appropriate operational security posture is maintained for an information system and as such, works in close collaboration with the Information System Security Manager (ISSM) and Information Security Office (ISO).

MINIMUM QUALIFICATIONS

Education: High school diploma or equivalent.

Training and Experience: Minimum of five (5) years' experience in Information Systems/Computer Security and providing multi-discipline technical security support in SAP (Special Access Programs)/SCI (Sensitive Compartmented Information) environment. Possess and maintain the DoD 8570.01M, (Chap 2, 3, 4) Information Assurance Technician Level 2 certification. Must possess extensive knowledge of DoD 5205.07 Vol 1-4 DoD Special Access Program (SAP) Security Manuals Implementation Guide.

General Skills: Must be able to handle multiple tasks, a self-starter, flexible in work assignments, detail oriented, highly organized, possess good interpersonal and written communication skills, and work under limited supervision.

Computer Skills: Proficient in Microsoft Word, Excel and Outlook.

Security Clearance: The ability to obtain a "Secret" security clearance, with a background investigation within the past six (6) years is required.

DUTIES AND RESPONSIBILITIES

• Assist the ISSM in meeting their duties and responsibilities. The ISSO shall assume ISSM responsibilities in the absence of the ISSM;
• Ensure systems are operated, maintained, and disposed of in accordance with security policies and procedures as outlined in the security authorization package;
• Attend required technical and security training (e.g., operating system, networking, security management) relative to assigned duties;
• Maintain required IA certifications;
• Ensure all users have the requisite security clearances, authorization, need-to-know, and are aware of their security responsibilities before granting access to the Information System (IS);
• Report all security-related incidents to the ISSM;
• Conduct periodic reviews of information systems to ensure compliance with the security authorization package;
• Serve as member of the Configuration Control Board (CCB), if designated by the ISSM;
• Coordinate any changes or modifications to hardware, software, or firmware of a system with the ISSM and Approval Officer (AO)/Designated Approval Officer (DAO) prior to the change;
• Formally notify the ISSM and AO/DAO when changes occur that might affect system authorization;
• Monitor system recovery processes to ensure security features and procedures are properly restored and functioning correctly;
• Ensure all IS security-related documentation is current and accessible to properly authorized individuals; and
• Ensure audit records are collected, reviewed, and documented (to include any anomalies).
• Perform other incidental and related duties as required and assigned.