Senior Information System Security Officer (ISSO) at ASEC

Orlando, Florida, United States -

Full Time

Start Date

Immediate

Expiry Date

15 Jun, 26

Salary

0.0

Posted On

17 Mar, 26

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Information Assurance, Cybersecurity, Risk Management Framework, RMF, Security Controls, CNSSI 1253, NIST SP 800-53, JSIG, Vulnerability Assessments, ACAS, STIG, SCAP Compliance Checker, Continuous Monitoring, Risk Analysis, Mitigation Strategies, DoD Information Systems

Industry

Aviation and Aerospace Component Manufacturing

Description

Description Location: NAWCTSD Orlando Security Clearance Requirement: Top Secret Telework Eligible? No - 100% On-Site As the Senior Information System Security Officer, you will provide support for a program information assurance program. The candidate will provide support for proposing, coordinating, implementing, and enforcing information system security policies, standards, and methodologies. The ideal candidate will have experience working with the Joint Special Access Program Implementation Guide (JSIG). As the Senior ISSO, you will provide mission-critical support by: Proposing, coordinating, implementing, and enforcing information system security policies, standards and methodologies. Performing vulnerability assessments using the Assured Compliance Assessment Solution (ACAS), Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG), and the Security Content Automation Protocol (SCAP) Compliance Checker, incorporating automated Benchmarks. Implementing operating systems and network devices security configuration in accordance with Defense Information Systems Agency (DISA) approved Security Technical Implementation Guides. Performing security control continuous monitoring, security audits, risk analysis and developing mitigation strategies for DoD information systems. Identifying Common Criteria and National Information Assurance Partnership (NIAP) certified technologies and the DISA Approved Products List (APL). Preparing certification letters and Memoranda of Agreement (MoA) with system owners for interface and networking implementations. The job description is not intended to be an all-inclusive list of duties and responsibilities. It is intended to describe the general nature of the position. Requirements Education Requirements: Bachelor's in Computer Science, Information Systems Management, Engineering, or a related, technical area of study preferred. Without a bachelor's degree, 10 years of experience as an ISSO will be required. At least 5 years of experience in the following areas is required: Information Assurance/Cybersecurity (IA/CS) Risk Management Framework (RMF) DODI 8510.01 Security controls and implementation delineated in Committee of National Security Systems Instruction (CNSSI) 1253 and National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53, and the Joint Special Access Program Implementation Guide (JSIG) Performing vulnerability assessments using Assured Compliance Assessment Solution (ACAS), Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG), the Security Content Automation Protocol (SCAP) Compliance Checker, incorporating automated Benchmarks Implementing operating systems and network devices security configuration in accordance with Defense Information Systems Agency (DISA) approved Security Technical Implementation Guides Performing security control continuous monitoring, security audits, risk analysis and developing mitigation strategies for DoD information systems Identifying Common Criteria and National Information Assurance Partnership (NIAP) certified technologies and the DISA Approved Products List (APL) Knowledge of the Intelligence Community Directive (ICD) 705, DoD 5205.07, and DOD 5205.07-M Volumes 1-4, Special Access Program (SAP) Policy, and the Joint Special Access Program Implementation Guide (JSIG) Certification Requirements: Candidates must hold a current IAM-III certification (i.e. CISM, CISSP, or GSLC) as defined by DoD 8570.01-M. Please upload copies of any relevant IT certifications as part of your application. These documents help us verify qualifications during the initial screening process. Equally Important: Ability to build positive, collaborative relationships across teams and with external partners. Effective communicator with strong verbal and written skills. Proactive, self-directed work style with the ability to operate independently. Analytical thinker with proven problem-solving capabilities. Highly organized, with the ability to balance competing priorities in a fast-paced environment. ASEC is committed to providing access and reasonable accommodation in its services, activities, programs, and employment opportunities in accordance with the Americans with Disabilities Act and other applicable laws. Security Clearance Requirement: This position requires U.S. citizenship and an active DoD Top Secret clearance. Selected candidate will be subject to a government security investigation and must meet eligibility requirements for access to classified information. Who We Are: ASEC offers meaningful work and a culture that supports your professional and personal growth. We are a 100% employee-owned business focused on providing value and innovation in the areas of engineering, information technology, training, and logistics. We believe in doing what is right for the Warfighter, plain and simple. We encourage you to explore what makes us different, visit our website now! Why work at ASEC? 100% employee-owned. Learn more about our ESOP plan here! Comprehensive benefits package (11 paid holidays, medical/dental/vision insurance, HSA/FSA, disability insurance, and more!) 401K match Tuition assistance (undergraduate and graduate) Veteran friendly Thriving employee culture Employee discount program We recruit, employ, train, compensate, and promote the most qualified persons for employment without regard to race, color, religion, sex, national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, genetic information, pregnancy or related condition (including breastfeeding), or any other status protected by law. ASEC will not discharge or in any other manner discriminate against employees or applicants because they choose to inquire about, discuss, or disclose their own compensation or the compensation of another employee or applicant.

Responsibilities

The Senior ISSO will support the program information assurance program by proposing, coordinating, implementing, and enforcing information system security policies, standards, and methodologies. This includes performing vulnerability assessments, implementing security configurations, conducting continuous monitoring, and developing mitigation strategies for DoD information systems.