Information Systems Security / Information System Security Officer (ISSO)

The ISSO supports the ISSM by verifying implementation of required security controls, conducting continuous monitoring and self-inspections, tracking corrective actions, supporting user access and training requirements, and ensuring classified systems are operated in accordance with the approved SSP, NISPOM Rule, CSA guidance, and local security procedures; this position is located in Columbia Maryland. Information System Security Officer - responsible for supporting the day-to-day security oversight of classified information systems and ensuring users, systems, and processes remain compliant with NISPOM Rule, DCSA/CSA guidance, approved security documentation, and local procedures.

Overview:

Information Systems Security / Information System Security Officer (ISSO)

LOCATION: Columbia, MD

JOB STATUS: Full-time

CLEARANCE: Ability to obtain TS

CERTIFICATION: CAP, CISSM, or CISSP

TRAVEL: Less than 5%

 

Astrion has an exciting opportunity for an experienced Information Systems Security Officer (ISSO). The ISSO supports the ISSM by verifying implementation of required security controls, conducting continuous monitoring and self-inspections, tracking corrective actions, supporting user access and training requirements, and ensuring classified systems are operated in accordance with the approved SSP, NISPOM Rule, CSA guidance, and local security procedures; this position is located in Columbia Maryland.

 

 

REQUIRED QUALIFICATIONS / SKILLS

• Bachelor’s degree with 2-4 years of experience.
• Experience in supporting U.S. Government clients.
• Be able to apply knowledge of IA policy, procedures, and workforce structure to develop, implement and maintain a secure network environment.
• A CAP, CISM, CySA, or CISSP certification is required.
• S. citizenship with active Top Secret eligibility and the ability to maintain such eligibility.

PREFERRED QUALIFICATIONS / SKILLS 

• Proficiency with Secure Internet Protocol Network establishment and maintenance.
• Proficiency with various compute applications and testing tools (Word, Excel, PowerPoint, WASSP, MBSA).
• Strong background in certification and accreditation process of information systems and ability to write, review and coordinate systems security plans.

RESPONSIBILITES:

• Information System Security Officer - responsible for supporting the day-to-day security oversight of classified information systems and ensuring users, systems, and processes remain compliant with NISPOM Rule, DCSA/CSA guidance, approved security documentation, and local procedures.
• Ensure compliance - with the approved System Security Plan (SSP), security policies, procedures, and system-specific requirements.
• Support the ISSM - in maintaining the classified information system security program.
• Coordinate and conduct system self-inspections and document results.
• Track, validate, and report corrective actions to the ISSM
• Support continuous monitoring activities, including review of audit logs, account activity, configuration changes, vulnerability status, and system security posture.
• Assist with configuration management and identify security-relevant changes that may require ISSM review or reauthorization.
• Ensure users receive required system security briefings, training, user agreements, and access authorizations before system access is granted.
• Monitor user compliance with classified system rules, including password/authentication protection, need-to-know, media handling, removable media restrictions, and reporting requirements.
• Support incident response for data spills, suspected compromises, audit anomalies, unauthorized activity, or other reportable security concerns
• Assist with maintaining authorization documentation, including SSPs, POA&Ms, risk assessments, security assessment results, contingency plans, configuration records, and authorization artifacts.
• Coordinate with the ISSM, FSO/AFSO, Insider Threat Program, IT, program leadership, and Government security representatives as required.
• Ensure classified systems are operated only within their approved authorization boundary, classification level, caveats, and accredited configuration

#CJ