Information System Security Officer (ISSM)

Overview

Information System Security Officer (ISSM)

Wright-Patterson AFB, OH (Hybrid)

Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employer’s core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level! 

The Information System Security Officer (ISSM) is a critical leadership role responsible for establishing, implementing, and managing the information security program within the organization for the Air Force Research Laboratory (AFRL) at Wright-Patterson AFB, Ohio.

Responsibilities

• Collaborate closely with cross-functional teams to assess security risks, develop mitigation strategies, and ensure compliance with regulatory requirements and industry standards.
• Oversee the creation, execution, and assessment of policies for information security programs.
• Create and maintain Assessment and Authorization (A&A) packages, Risk Assessment Reports (RARs), System Security Plans (SSPs), Security Controls Traceability Matrices (SCTMS), Plans of Action & Milestones (POA&Ms), Memorandums of Agreement (MOAs), policy documents, and other required system artifacts.
• Manage the monitoring of information security systems using Elastic and other tools to maintain organizational situational awareness.
• Develop and maintain technical user documentation and standard operating procedures (SOPs).
• Assess threats and vulnerabilities to determine whether additional safeguards should be implemented.
• Perform risk assessments on changes to information systems and their operating environments that could impact cybersecurity posture and system authorization.
• Research and make recommendations regarding hardware and software required to securely operate and maintain the organization’s cybersecurity posture.
• Routinely review Assured Compliance Assessment Solution (ACAS), vulnerability scans, and Security Technical Implementation Guides (STIGs), and update Plan of Action and Milestones (POA&M) accordingly.
• Review and approve new user account requests.
• Coordinate with approving officials on approval of external information systems, i.e., interconnected systems.
• Provide guidance to customers on RMF requirements and assist with any security-related issues they may have.
• Ensure configuration management (CM) for security-relevant changes to software, hardware, and firmware is properly documented.
• Supervise and mentor Cybersecurity Specialists, Software Tester, and other staff as they perform cybersecurity-related duties.
• Interface directly with sites’ security officers as well as DCSA representatives to ensure security requirements are consistently met and to conduct inspections as needed.
• Act as the program’s designated Cybersecurity Liaison.
• Ensure that all contractor staff servicing the organization are made aware of their duties, restrictions, procedures, and regulations relating to information security.
• Implement and track compliance with network security directives.
• Track and resolve malicious logic incidents.
• Responsible for the resolution of classified spillage incidents that could be identified by either Government or Contractor personnel.
• Author and maintain Policies, Processes, and Procedures within the organization's Strategic IT Management framework.
• Maintain a neat, secure, and orderly facility.
• Complete annual company and customer training requirements according to established policies and procedures, as required.
• Record labor hours daily in an online corporate system.
• Travel up to 10%.
• Other duties as assigned.

Qualifications

• Computer Science-based bachelor’s degree OR 6+ years of equivalent experience.
• • Expertise in cybersecurity principles, risk management, and compliance frameworks to protect the confidentiality, integrity, and availability of sensitive information and critical assets required.
• Prior performance as an ISSM. Current CompTIA Security + OR CySA+ certification required.
• IAM Level III Baseline cert required.
• Must possess and maintain a valid U.S. driver’s license.
• Secret clearance with an ability to obtain TS/SCI is required.

Knowledge, Skills and Abilities:

• Strong experience with security-relevant tools and software such as ACAS, Radix, SCAP, ESS, Elastic, eMASS, and PEGA.
• Experience with Linux, Windows, and infrastructure virtualization required.
• Experience with network devices and software from Fortinet, Cisco, Palo Alto, and Solar Winds.
• Deep knowledge of NIST SP 800-37, NIST SP 800-53, FIPS 199, and FIPS 200.
• Experience creating artifacts, control implementation details, policy documents, and POA&Ms.
• Maintain a professional manner, have proper telephone, and email etiquette, customer service techniques, and organizational skills.
• Must have strong written and oral communication skills to include the ability to read, write, speak, and understand the English language.
• The ability to perform in a leadership capacity and be capable of directing contractor personnel and interfacing with the Government and customers.
• Exceptional customer service skills.
• Strong time-management and prioritization skills.
• Ability to communicate applicable technical subject matter expertise to management and others.
• Possess strong problem-solving skills.
• Ability to learn and work in new digital environments as required.
• Ability to self-start and work independently or as a team.
• Ability to learn new systems and associated software applications for proficient execution of tasks and managing multiple tasks with time-related constraints in a fast-paced environment.
• Ability to travel up to 10% as requested.

How you’ll grow 

At Chenega MIOS, our professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe there’s always room to learn. 

We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers. 

Benefits 

At Chenega MIOS, we know that great people make a great organization. We value our team members and offer them a broad range of benefits. 

Learn more about what working at Chenega MIOS can mean for you. 

Chenega MIOS’s culture 

Our positive and supportive culture encourages our team members to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them be healthy, centered, confident, and aware. We offer well-being programs and continuously look for new ways to maintain a culture where we excel and lead healthy, happy lives. 

Corporate citizenship 

Chenega MIOS is led by a purpose to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our team members, and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities. 

Learn more about Chenega’s impact on the world. 

Chenega MIOS News- https://chenegamios.com/news/ 

Tips from your Talent Acquisition Team 

We want job seekers exploring opportunities at Chenega MIOS to feel prepared and confident. To help you with your research, we suggest you review the following links: 

Chenega MIOS web site - www.chenegamios.com 

Glassdoor - https://www.glassdoor.com/Overview/Working-at-Chenega-MIOS-EI_IE369514.11,23.htm 

LinkedIn - https://www.linkedin.com/company/1472684/ 

Facebook - https://www.facebook.com/chenegamios/

#Chenega Analytic Business Solutions, LLC