Information Systems Security Officer (ISSO)

Essential Duties and Responsibilities

• Under general direction this role carries out all phases of information systems/networks security program that involves access to computers and computerized data enabling company to meet contractual requirements for networkssecurity.
• Conducts regular audits to ensure that systems are being operated securely and information systems security policies andprocedures are being implemented as defined in security plans.
• Develop update and manage Authorization to Operate (ATO) packages. Navigate and maintain system records within the Enterprise Mission Assurance Support Service (eMASS).
• Execute continuous monitoring strategies. Review audit logs analyze vulnerability scans and verify system configuration baselines remain intact.
• Implement enforce and assessNIST SP 800-53security controls. Apply and verify Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
• Utilize the Assured Compliance Assessment Solution (ACAS) to scan for identify and coordinate the remediation of system vulnerabilities.
• Identify report and track cybersecurity incidents and data spills in accordance with USAF and DoW incident response directives.
• Draft review and maintain System Security Plans (SSP) continuous tracking of Plan of Action and Milestones (POA&M) and system-specific operating procedures.
• Deep understanding of the NIST RMF lifecycle DoDI 8510.01 and USAF-specific guidance (e.g. AFI 17-101 Risk Management Framework for Air Force Information Technology).