Information System Security Officer (ISSO) Lead

Information System Security Officer (ISSO) Lead
Joint Base San Antonio (JBSA), TX

Position Description:
Shall be the overall coordinator and lead to support MTC information security requirements and activities related to DoD RMF process and cybersecurity security programs for the MTC ISO. The Audit Lead is responsible leading a team to assist the ISO with managing system development, integration, modification, operation and maintenance, life-cycle management execute, monitor and support Government- directed compliance and vulnerability management activities related to DoD, US Army Cybersecurity programs for Contractor managed systems, to include assessments, non- compliance mitigation strategies, documentation (policy, processes, procedures) reviews, IA vulnerability and compliance software tools, RMF continuous monitoring program, eMASS security controls, artifacts, and POA&M support management and remediation. Responsible to provide Cybersecurity/IA security administration service IAW DoD Cybersecurity policies and regulations, and the RMF Process at the MTC’s. Additionally, shall perform security administration functions to include compliance, vulnerability, configuration management, and incident response; and continuously monitor document, and report existing security configurations and implemented controls (technical, logical, physical, and procedural) IAW applicable security policies. This position requires a Top-Secret Security Clearance and the appropriate DOD 8570.01 baseline certification as an IAMII.

Qualifications:

• Expert understanding of NIST, DoD, & Army Cybersecurity & Risk Management Framework policies, directives, instructions, manuals, and best business practices.
• Knowledge of current industry methods for evaluating, implementing, and disseminating IT security assessment, monitoring, detection and remediation tools and procedures utilizing standards-based concepts and capabilities.
• Knowledge of disaster recovery continuity of operations plans.
• Knowledge of enterprise incident response program, roles, and responsibilities. Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., Application of Defense-in-Depth).
• Knowledge of known vulnerabilities from alerts, advisories, errata, and bulletins.
• Knowledge of measures or indicators of system performance and availability. Have completed a BS or BA degree, subject immaterial.
• Have a background of at least ten years’ experience with Military training and training support.
• Have completed the Army Command & General Staff College (CGSC) or Intermediate Level education or equivalent level military schooling.
• TS/SCI clearance
• IAM II