Information Systems Security Officer (ISSO) II

ISSO II sought to support an information assurance program for a program, organization, system, or enclave. Responsibilities include proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies; maintaining the operational security posture for systems; assisting in day-to-day security operations; evaluating security solutions for compliance with processing classified information; performing vulnerability/risk assessments to support certification and accreditation; providing configuration management for security software/hardware/firmware; managing changes and documenting SSPs, Risk Assessment Reports, and SRTMs; supporting RMF-based security authorization activities; and collaborating with the Information System Security Manager to maintain an appropriate IA posture and develop/update IA documentation. The role requires extensive experience as an ISSO, a Bachelor’s degree, and DoD 8570 IAM Level I or higher. Knowledge of ODNI/DoD policies, C&A processes, NIST RMF, and security policy development is expected, along with capability to develop and maintain security policy documentation and support enterprise security programs.