Information Systems Security Officer (ISSO), Mid (MCSES III)
$140,000–$140,000 year
On-siteSan Diego, California, United States
Job Summary
Maintain the operational security posture for assigned Information Systems and networks in accordance with cybersecurity policies and Information Assurance Standard Operating Procedures. Serve as the principle technical advisor to Information Systems Security Managers, Program Security Officers, and Delegated Authorizing Officials while performing functional duties as alternate ISSM to maximize operational readiness. Provide expertise to maintain Authority to Operate and Authorization to Connect for assigned IS, ensuring Risk Management Framework compliance through regular cybersecurity assessments that identify vulnerabilities and evaluate existing security controls. Conduct site surveys to develop RMF artifacts supporting ATO/ATC, facilitate IS deployments, and develop supporting documentation such as Plan of Action and Milestones to coordinate remediation strategies. Develop and integrate policies to reinforce Access Controls, maintain audit record management, and prepare for cybersecurity, physical, and personnel security assessments from senior management. Complete necessary initial and annual training to establish and maintain access to supported systems and networks.
Required Qualifications
- 5 years of information systems management and cybersecurity experience
- Active TS clearance with SCI eligibility
- Proficient in firewall administration, intrusion detection systems, anti-virus software, and data encryption
- In-depth knowledge of information security principles and practices, including NIST SP 800-53 controls, DoD Risk Management Framework (RMF), and DoD Instruction 8510.01
- Experience with cybersecurity RMF compliance and regulatory requirements
- Strong analytical, problem-solving, and decision-making skills
- Strong communication skills, adept at briefing executives and program IPT level leadership
- Self-starter, strong work ethic, and willingness to be a contributing IPT member
- Must possess an active DoD 8140/8570.01-M baseline certification at IAM Level II or higher (e.g., SecurityX CE, CySA+, CISSP, or CISM)
- Candidates without IAM Level II on day one may be considered if they currently meet IAT Level II and can obtain an IAM Level II certification within an agreed-upon timeframe
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.