Information System Security Officer – Isso

Information System Security Officer – Isso

Requirements

• Possess a Bachelor’s of Science degree in a related filed and 6 years of relevant experience or an Associate’s Degree and 10 years of relevant operational experience.
• Minimum of 4 years of ISSO experience is required.
• Must possess a current TS/SCI clearance eligibility on date of employment.
• Must possess knowledge and experience using NISTSP 800-53 Rev 4 and CNSSI 1253.
• Must possess current DOD 8140 IAT Level II certifications on date of employment.

Responsibilities

• Responsible for the day-to-day security accreditation and certification of TS/SCI SAP-specific systems.
• Monitor SAP systems and operating environments to include developing and updating security plans, managing, and controlling changes, and assessing the security impact of those changes in compliance with operational and security directives.
• Oversee SAP account authorization, creation, and management.
• Ensure all users have the requisite security clearances, authorization, need-to-know.
• Develop and implement security education, training, and awareness programs and ensure all personnel are provided security awareness training before granting SAP access.
• Notify the Information System Security Manager (ISSM) of any changes or modifications to hardware, software, or firmware that might adversely impact system accreditation and ensure proper measures are taken when an incident or vulnerability is discovered in compliance with governing directives.
• Provide inputs to DCGS System Security Authorization Agreement (SSAA), prepare all on-site information assurance documentation, populate the XACTA database with system accreditation actions/data, create Plans-of-Action and Milestones (POA&M) and recommend / implement Security Assessment Reports (SAR) corrective actions.
• Develop, collaborate and coordinate IA solutions with product developers and AF acquisition agents, security, Information Technology and operations personnel during day-to-day operations and during a variety of weekly / monthly forums.
• Capable of working independently and collaboratively with AF DCGS stakeholders and possess excellent oral and written communication skills.

Preferred Qualifications

• Previous SAP access
• IAM II certification
• Extensive working knowledge of Risk Management Framework (RMF), Assessment and Authorizations (A&A), Xacta IA Manager workflow platforms is highly desired.