Information Systems Security Officer (ISSO)

Spectrum Comm Inc • Full-time • Tucson, AZ, US • 1d ago

The Information System Security Officer (ISSO) will provide essential support for the management and oversight of Advanced Information Security (AIS) within the organization. This role entails reviewing, preparing, and updating AIS authorization packages, identifying vulnerabilities, and implementing effective countermeasures to safeguard information systems. The ISSO will ensure that AIS and network nodes are operated, maintained, and disposed of in accordance with established security policies and practices, thereby ensuring the integrity, confidentiality, and availability of sensitive information.

Key Responsibilities:

Review, prepare, and update Advanced Information Security (AIS) authorization packages to comply with regulatory and organizational standards
Identify AIS vulnerabilities through regular assessments and audits, implementing appropriate countermeasures to mitigate risks
Ensure that AIS and network nodes are operated, maintained, and disposed of in compliance with security policies and practices, including DoD Directive 8570.01-M
Collaborate with IT personnel to develop and enforce security policies, procedures, and best practices across all information systems
Conduct regular security assessments and audits to evaluate the effectiveness of existing security controls and recommend improvements
Maintain up-to-date knowledge of emerging threats, vulnerabilities, and security trends to inform risk management strategies
Provide guidance and support for incident response activities, including the investigation of security breaches and the development of remediation plans
Assist in the training and education of personnel on information security policies, procedures, and best practices
Prepare reports and documentation for senior management regarding AIS security posture and compliance status

Requirements

Qualifications:

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field, or equivalent practical experience
Certification in accordance with DoD Directive 8570.01-M for Information Technician Level 2 is required
Proven experience in information security, risk management, or a related field, particularly within the military or defense sector
Strong understanding of security frameworks, policies, and standards, including NIST, FISMA, and other relevant regulations
Excellent analytical and problem-solving skills with the ability to assess complex security issues and implement effective solutions
Strong communication skills, both written and verbal, with the ability to convey technical information to non-technical stakeholders
Ability to work independently and as part of a team, managing multiple tasks and projects simultaneously
Active Top Secret Clearance

Benefits