Information Systems Security Officer

Overview

The Information System Security Officer (ISSO) has responsibility for cybersecurity functions specifically on the EB Corporation Unclassified Network (EBCUN). This position requires the ability to understand, implement, and enforce the security policies and procedures required by OPNAVINST N9210.3, DFARS 252.204-7012, NIST SP 800-171, and other applicable regulations.     

The successful candidate must possess sufficient understanding, knowledge, and experience to implement, enforce, and ensure compliance with policies and procedures developed to meet the requirements of the DFARS 252.204-7012 and NIST SP 800-171 on EB Information Systems.  This position will work closely with EB IT, Information System Security Managers (ISSMs), Cybersecurity Program Assurance Representatives, other ISSOs, and other program stakeholders.

This position requires a balance of technical knowledge and experience, with strong analytical, documentation, and reporting skills. 

Responsibilities include:  

• Supporting the development, enforcement, and maintenance of organization-wide Cybersecurity policies, procedures, templates, and associated education, awareness, and training products; organization-wide Risk Management Strategy; and the organization-wide Continuous Monitoring (ConMon) Strategy
• Verifying security policies and controls are applied to meet security objectives of the EBCUN.
• Perform daily security functions in support of Governance, Risk, and Compliance activities, to include auditing and assessing control effectiveness.
• Ensuring EBCUN security operations and maintenance activities are properly documented and updated as necessary.
• Ensuring that cybersecurity related products or other compensating security control technologies reduce identified risk to an acceptable level.
• Performing security reviews, identify gaps in security architecture, and document with risk management plans.
• Providing cybersecurity recommendations to stakeholders for current infrastructure and new initiatives.
• Supporting internal and external inspections and assessments
• Other responsibilities as necessary to support the cybersecurity program
• Continually staying up-to-date on the latest threats and vulnerabilities.

NOTE: This is not a remote position.

Qualifications

Required:

• Minimum of A.S. Degree (or higher) in Cybersecurity, Information Technology (IT) or Equivalent, or related certifications OR a minimum of a high school degree and 1+ years related working experience
• 9+ months of experience with Windows and/or Linux operating systems and configuration and hardening standards
• 1+ years of experience with computer networking concepts
• Ability to obtain and maintain a DoD SECRET clearance

Preferred:

• Professional Cybersecurity certification (e.g. Security+, Network+, CISSP)

Skills

• Strong analytical, problem solving, organizational, communication, and time management
• Ability to work independently and collaboratively as part of a multi-functional team in a fast paced and challenging environment
• Ability to apply cybersecurity principles to organizational requirements.
• Ability to assess security controls based on cybersecurity principles and tenets, factoring in how changes in conditions, operations, or the environment will affect various outcomes.
• Understanding of the DFARS 252.204-7012 and NIST SP 800-171 controls.

Environmental Attributes

Inside