Information Systems Security Officer Level 1

Job Description

An ISSO is an individual responsible for ensuring that the appropriate operational security posture is maintained for an information system and as such, works in close collaboration with the information system owner. The information system security officer also serves as a principal advisor on all matters, technical and otherwise, involving the security of an information system. The information system security officer has the detailed knowledge and expertise required to manage the security aspects of an information system and, in many organizations, is assigned responsibility for the day-to-day security operations of a system. This responsibility may also include, but is not limited to, physical and environmental protection, personnel security, incident handling, and security training and awareness. The information system security officer may be called upon to assist in the development of the security policies and procedures and to ensure compliance with those policies and procedures. In close coordination with the information system owner, the information system security officer often plays an active role in the monitoring of a system and its environment of operation to include developing and updating the security plan, managing and controlling changes to the system, and assessing the security impact of those changes.

• 
  Familiar with and applies knowledge of National level Security Policies to include: Intelligence
• Community Directive (ICD) 503, National Institute of Standards and Technology (NIST) 800 Series.
• Familiar with and applies knowledge of Roles and responsibilities of the Information Technology (IT) Security Manager/Information System Security Manager (ISSM) for maintaining the appropriate operational security posture.
• Prepares and maintains Certification and Authorization (C&A) documentation.
• Maintains the operational security posture for an information system.
• Interacts with Customers, Information Technology (IT) Staff, Information System Security Manager (ISSM), Information Owner, Information System Owner, and Designated Authorizing Official (DAO) in written and verbal communications.
• Performs assigned tasks in a timely manner within an unsupervised environment.

Required Skills

• 
  Provides support for a program, organization, system, or enclave’s information assurance program.
• Provides support for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies
• Maintains operational security posture for an information system or program to ensure information systems security policies, standards, and procedures are established and followed.
• Assists with the management of security aspects of the information system and performs day-to-day security operations of the system.
• Evaluate security solutions to ensure they meet security requirements for processing classified information. Performs vulnerability/risk assessment analysis to support certification and accreditation.
• Provides configuration management (CM) for information system security software, hardware, and firmware.
• Manages changes to system and assesses the security impact of those changes.
• Prepares and reviews documentation to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs).
• Supports security authorization activities in compliance with Information System Certification and Accreditation Process (NISCAP) and DoD Information Assurance Certification and Accreditation Process (DIACAP).

Education:

High School Diploma with 4 years of work experience in any combination of: System Administrator (SA), Information System Security Officer (ISSO), Information System Security Engineer (ISSE), Information Technology (IT) Service Desk, Computer Network Defense (CND) Analyst, Telecommunication Technician, and Network Administration

OR

Associates Degree in Information Technology Discipline with 2 years of work experience in any combination of: System Administrator (SA), Information System Security Officer (ISSO), Information System Security Engineer (ISSE), Information Technology (IT) Service Desk, Computer Network Defense (CND) Analyst, Telecommunication Technician, and Network Administration

About Nyla Technology Solutions