What are the responsibilities and job description for the Information System Security Officer position at AOCE, Inc?
About This RoleWho We Are : CAE Vision : Our vision is to be the worldwide partner of choice in defense and security, civil aviation, and healthcare by revolutionizing our customers' training and critical operations with digitally immersive solutions to elevate safety, efficiency and readiness. CAE Defense & Security Mission : CAE's Defense and Security business unit focuses on helping prepare military customers to develop and maintain the highest levels of mission readiness. CAE Values : Empowerment, Innovation, Excellence, Integrity and OneCAE make us who we are and we strive to make a difference in the world while helping each other succeed.What We Have to Offer : Comprehensive and competitive benefits package and flexibility that promotes work-life balance A work environment where all employees are valued, respected and safe Freedom to succeed by enabling team members to deliver, take initiatives and make decisions Recognition, professional development, advancement and having fun!Summary The ISSO will provide Cybersecurity subject matter expertise with government security procedures and policies and ensure compliance and quality control across multiple architectures and government systems. Essential Duties and Responsibilities Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Provide support to certification and accreditation implementing the Risk Management Framework (RMF) across multiple classification domains and update status in the Enterprise Mission Assurance Support Service (eMASS) syste Create, update and maintain artifacts for systems accreditation within Enterprise Mission Assurance Support Service (eMASS) Work with system / network administrators to conduct vulnerability scanning using latest DoD security tools (Nessus Security Center) Perform host-based security monitoring utilizing McAfee Enterprise Policy Orchestra (McAfee ePO) Document cybersecurity tactics, techniques and procedures; maintaining document repository Collaborate with network administrators to develop and maintain DISA compliant Ports Protocols Services Management (PPSM) data for all systems assigned. Collaborate with configurations management to develop and maintain authorized hardware / software lists for all systems assigned. Work as an integrated team member in a highly dynamic, operationally sensitive environment providing mission critical data to the war fighter. Communicate and coordinate across the Cybersecurity team for cyber-related issues. Analyze security risks, threats and vulnerabilities from multiple sources and recommend strategies to leadership to prevent security exposures and detect intruders. Create plans to implement solutions and follow them through to completion keeping all stakeholders informed. Review, maintain and report compliancy of Cybersecurity Task / Operational Orders with appropriate governing entities. Stay current with Government and industry trends, laws and standards and recommend methods to meet requirements. Analyze and define information security requirements for current and future internal and external data connections and maintain documentation for those connections in a central repository. Coordinate with external cybersecurity teams for vulnerability testing of the MMC cybersecurity posture Perform and document Account Access Authorization and Control for all information systems assigned Qualifications and Education Requirements Certifications : CompTIA Security TS / SCI Clearance required. Ability to perform multiple projects with dynamic tasking and follow-through from beginning to end on assigned tasks. Ability to work as an integrated member of a dynamic and mission focused team to promote a cooperative working environment and a positive team atmosphere. Working knowledge of cyber doctrine and DoD / Industry Cybersecurity best practices. Working knowledge of network pro ocols and MS Windows defense and threat mitigation. The ability to think analytically and approach issues logically and systematically. Excellent spoken and written communications skills. Preferred Qualifications Education : AAS / BA / BS Certifications : CISSP, CISM, CASP, C|EH, CHFI Desired experience with eMASS, Trellix (previously McAfee) ePolicy Orchestrator, Assured Compliance Assessment Solution (ACAS), and Security Content Automation Program (SCAP) / Security Technical Implementation Guide (STIG), Amazon Web Services Security Responsibilities Must complywith all company security and data protection / usage policies and procedures. Personally responsible for proper marking and handling of all information and materials, in any form. Shall not divulge any information, or afford access, to other employees not having a need-to-know. Shall not divulge information outside company without management approval. All government and proprietary information will be accessed and stored electronically on company provided resources. Incumbent must be eligible for DoD Personal Security Clearance. Due to U.S. Government contract requirements, only U.S. citizens are eligible for this role. Work Environment This job operates in a professional office environment. This role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fax machines. Travel is occasional (1-2 times per year).