Information System Security Officer (ISSO)

Overview

The Information Systems Security Officer (ISSO) will provide security engineering support for the design, development, fielding, and sustainment of embedded electronics systems for DoD ground vehicles. The ISSO assists the Cybersecurity IPT with research, guidance, and documentation within their assigned program. The ISSO serves as a trusted advisor in cybersecurity activities (i.e. eMASS, data entry, research, etc.) to ensure that identified systems are appropriately documented to meet compliance guidelines as directed by the DOD and appropriate subordinate organizations.

This position requires full-time on-site support at the client location.

Essential Job Functions

• Lead a combined project team of government and contract employees located in many different locations while meeting directed delivery dates to meet fielding requirements.
• Review ground combat vehicles systems for vulnerabilities and recommend controls.
• Develop and input data into to support the Department of Defense Risk Mitigation Framework.
• Coordinate with government personnel to plan, coordinate and execute penetration testing.
• Lead a combined project team of government and contract employees to develop Army Acquisition Milestone Documentation.
• Provide electrical, mechanical and software support to Combat Vehicle system planning, design, development, and execution.
• Work in a team environment with our Army customer and DCS Engineers.
• Develop Subject Matter Expertise on a variety of combat vehicle subsystems.
• Appointed as an ISSO for a program or can function as cybersecurity support staff.
• Supports the Information System Owner (ISO) / Information Systems Security Manager (ISSM) in their efforts to enforce and implement DoD / Army cybersecurity policies and procedures as mandated.
• In partnership with cybersecurity staff, recommend common and system-specific security controls for ISO approval.
• In partnership with cybersecurity staff, continually review the selected security controls and assist in determining their adequacy and suitability for protecting the information and information system.
• Notify Cybersecurity IPT when changes occur that might affect the Information System accreditation / certification (ECP, Policy, Vulnerability, etc.).
• Report non-compliance issues and concerns through the Cybersecurity IPT in the event of identification (Scans, Document Review, New Technology, etc.).
• Participate in discovery of vulnerabilities and document mitigations in eMASS identified by Information System Security Engineer (ISSE).
• As necessary, participate in technical reviews, program and / or Cybersecurity IPT, and internal assessment / evaluation team meetings.
• Provide guidance and assistance to the supporting Cybersecurity IPT to ensuring documents are prepared, drafted, and maintained in accordance with the DoD Risk Management Framework.
• In conjunction with the Cybersecurity IPT, monitor compliance with DOD / Army cybersecurity policies and procedures to ensure information system is operated, maintained, and disposed of in accordance with proper security policies and in accordance with programmatic documents during tenure with program.
• Maintain a current working knowledge of NIST, DOD, Army guidance and regulations as they pertain to cybersecurity system authorization activities and the DOD RMF process.
• In coordination and collaboration with cybersecurity staff, the ISSO will assist with drafting cyber-related aspects, monitoring, and maintaining the below security documentation examples and enter into eMASS.

Note : This position requires full-time on-site support at the client location.

Required Skills

Desired Skills

J-18808-Ljbffr