Information System Security Officer (ISSO) – Korea

GDIT has an exciting opportunity available for an Information System Security Officer (ISSO) to perform ISSO duties on the Army Defense Red Switch Network (DRSN). Successful applicant must have an active Top Secret clearance, be a self-starter, and have experience with Xacta, RMF, TEMPEST and STIG. 

How the ISSO will make an impact:

• Identify and select appropriate security controls applicable to assigned Army Information Security (IS).
• Review and submit for approval the Security Plan (SP) and continuous monitoring strategy.
• Implement control solutions consistent with DoD component cybersecurity architectures.
• Document security control implementation in SP of the assigned Army IS.
• Prepare the Plan of Actions and Milestones (POAM).
• Assess selected controls annually.
• Submit and update SP, Security Assessment Report (SAR), and POA&M.
• Report security status to Organizational - Information System Security Manager (O-ISSM).
• Implement system decommissioning strategy, if applicable.
• Additional duties per DA Pam 25-2-14, RMF for Army IT:

• Effect continuous coordination with the organizational cybersecurity personnel for which the systems are demonstrated, tested, or fielded.
• Meet the training and certification requirements of DCWF Code 722 (ISSM) and/or 612 (SCA) per DoDM 8140.03.
• Ensure the appropriate organizational operational security posture is maintained for the assigned Army Information System (IS).
• Maintain organizational situational awareness and initiate actions to improve or restore cybersecurity posture of assigned Army IS.
• Assist the ISSMs in meeting their duties and responsibilities and initiate protective measures for cybersecurity incidents.
• Implement and enforce assigned Army IS cybersecurity policies and procedures, as defined by cybersecurity-related documentation.
• Ensure users for Army ISs under the ISSO’s purview have the requisite security clearances and access authorization and are aware of their cybersecurity responsibilities before being granted access to those systems.
• In coordination with the ISSM, initiate protective or corrective measures when a cybersecurity incident or vulnerability is discovered or reported.
• Ensure Army IS cybersecurity-related documentation is current and accessible to properly authorized individuals.
• Ensure implementation of IAVM dissemination, reporting, and compliance procedures.
• Ensure users receive initial and annual cybersecurity awareness training.
• Prepare, distribute, and maintain plans, instructions, and SOPs concerning system security.
• Review and evaluate the effects on security of system changes, including interfaces with other ISs and documents all changes.
• Ensure that all ISs within their area of responsibility have received a current ATO.

• Other duties as assigned.

What you'll need to be successful:

• Excellent multi-tasking and organization skills. Must manage multiple simultaneous projects and prioritize assignments and tasks accordingly, remaining flexible to changing priorities and new initiatives
• BA/BS plus 2 years’ experience, AA/AS/plus 4 years’ experience, or a High School diploma and 7 years’ experience.
• 8570 IAM Level II certification.
• Telos Xacta experience.
• NIST Risk Management Framework (RMF) experience.
• TEMPEST experience.
• Security Technical Implementation Guide (STIG) experience.
• Active U.S. Government TS clearance with the ability to obtain SCI and Polygraph.
• US passport valid for at least 2 years.

#GDITPriority

#CECOMWFS

#DefenseOCONUS