Associate Information System Security Officer with Security Clearance

About the Role

The Associate Information System Security Officer (ISSO) will assist in preparation, development, and maintenance of specialized Information Systems (IS) security plans used to obtain/retain DCSA accreditation.

Key Responsibilities

• Oversee system compliance and auditing of information systems.
• Review and revise information system (IS) system plans documentation based on analysis of existing equipment configuration.
• Document any changes or special security requirements.
• Oversee and manage the implementation of cybersecurity products, potentially including a SIEM tool, vulnerability scanner, endpoint security, and DLP.
• Assist with the deployment and sustainment of continuous monitoring requirements on the IS.
• Provide day-to-day technical support to classified IS, ensuring adherence to policies, procedures, and best practices.
• Review and map evidence from applicable security requirement sources (e.g., STIGs, DISA guidance, customer requirements) within the SCTM and RMF evidence package.
• Assist with the design, development, and implementation of annual IS security training for end-users.
• Provide similar but specialized training to Data Transfer Agents (DTAs) and System Administrators (SAs) annually.
• Assist in the development of drafting procedures for the protection of the information system.
• Assist in spill containment and cleanup.
• Partner and work with Government agencies, including the Department of War (DoW), on information security matters.
• Participate in investigations relating to IS security violations and provide "lessons learned" to the IS community.
• Communicate security risks and solutions to business partners and IT staff.
• Assist the Information Systems Security Manager (ISSM) and implement information systems security tasks for safeguarding, handling, and controlling classified materials, documents, and equipment.
• Follow all import/export requirements, consulting with facility import/export personnel as required.

Requirements & Tech Stack

• US Citizenship with ability to attain/maintain government security clearance.
• Bachelor's degree (B.S.) from a four-year college or university in a related field.
• 0-2 years of information technology experience with a cybersecurity focus and/or training; or equivalent combination of education and experience.
• Ability to obtain and maintain a cybersecurity certification (e.g., Security+) within 1 year of hire.
• Knowledge of National Industrial Security Program Operating Manual (NISPOM).
• Knowledge of DCSA Assessment and Authorization Process Manual (DAAPM).
• Knowledge of DCSA Assessment and Authorization Guide (DAAG).
• Knowledge of Risk Management Framework (RMF).
• Knowledgeable in information systems security to assure enforcement of company and government regulations.
• Automated vulnerability scanning tools.
• Forensic tools.
• Windows and other operating systems.
• Information security architecture.
• Systems design.
• Integration of systems.
• Networking.
• Microsoft Office Suite (e.g., Outlook, Word, Access, Excel, PowerPoint, Project, Visio).
• Ability to travel approximately 5%.

Qualifications

• Ability to learn and adapt to new technologies.
• Problem Solving: Identifies and resolves problems in a timely manner; gathers and analyzes information skillfully.
• Project Management: Communicates changes and progress.
• Technical Skills: Pursues training and development opportunities; strives to continuously build knowledge and skills.
• Oral/Written Communication: Listens and gets clarification; responds well to questions; records data; writes clearly and informatively; able to read and interpret written information.
• Teamwork: Gives and welcomes feedback; supports everyone's efforts to succeed.
• Leadership: Exhibits confidence in self and others; inspires and motivates others to perform well; accepts feedback from others; gives appropriate recognition to others.
• Change Management: Develops workable implementation plans; communicates changes effectively.
• Business Acumen: Understands business implications of decisions.
• Ethics: Treats people with respect.
• Organizational Support: Follows policies and procedures; supports organization's goals and values.
• Judgment: Includes appropriate people in decision-making process.
• Motivation: Demonstrates persistence and overcomes obstacles.
• Planning/Organizing: Prioritizes and plans work activities; uses time efficiently.
• Professionalism: Approaches others in a tactful manner; reacts well under pressure; accepts responsibility for own actions; follows through on commitments.
• Quality: Demonstrates accuracy and thoroughness; looks for ways to improve and promote quality; applies feedback to improve performance; monitors own work to ensure quality.
• Quantity: Completes work in a timely manner; strives to increase productivity.
• Safety and Security: Observes safety and security procedures; uses equipment and materials properly.
• Adaptability: Adapts to changes in the work environment; able to deal with frequent change, delays, or unexpected events.
• Initiative: Seeks increased responsibilities; asks for and offers help when needed.
• Innovation: Generates suggestions for improving work.
• Strong interpersonal skills.
• Strong oral and written communication abilities with all levels of management, employees, and customers; ability to communicate and explain information efficiently.
• Ability to translate security situations and postures into business objectives and outcomes.
• Ability to add, subtract, multiply, and divide in all units of measure, using whole numbers, common fractions, and decimals.
• Ability to compute rate, ratio, and percent.
• Develops solutions to a variety of complex problems, potentially referring to established precedents and policies.
• Demonstrates judgment and discretion in working with sensitive information and confidential matters.