Information System Security Officer

Information System Security Officer (ISSO)

LOCATION: Columbia, MD

JOB STATUS: Full-time

CLEARANCE: Ability to obtain TS

CERTIFICATION: CAP, CISSM, or CISSP

TRAVEL: Less than 5%

SALARY RANGE: $78K - $117K

Astrion has an exciting opportunity for an experienced Information Systems Security Officer (ISSO). The ISSO supports the ISSM by verifying implementation of required security controls, conducting continuous monitoring and self-inspections, tracking corrective actions, supporting user access and training requirements, and ensuring classified systems are operated in accordance with the approved SSP, NISPOM Rule, CSA guidance, and local security procedures; this position is located in Columbia Maryland.

REQUIRED QUALIFICATIONS / SKILLS

• Bachelor’s degree with 2-4 years of experience.
• Experience in supporting U.S. Government clients.
• Be able to apply knowledge of IA policy, procedures, and workforce structure to develop, implement and maintain a secure network environment.
• A CAP, CISM, CySA, or CISSP certification is required.
• U.S. citizenship with active Top Secret eligibility and the ability to maintain such eligibility.

PREFERRED QUALIFICATIONS / SKILLS 

• Proficiency with Secure Internet Protocol Network establishment and maintenance.
• Proficiency with various compute applications and testing tools (Word, Excel, PowerPoint, WASSP, MBSA).
• Strong background in certification and accreditation process of information systems and ability to write, review and coordinate systems security plans.

RESPONSIBILITES:

• Information System Security Officer - responsible for supporting the day-to-day security oversight of classified information systems and ensuring users, systems, and processes remain compliant with NISPOM Rule, DCSA/CSA guidance, approved security documentation, and local procedures.
• Ensure compliance - with the approved System Security Plan (SSP), security policies, procedures, and system-specific requirements.
• Support the ISSM - in maintaining the classified information system security program.
• Coordinate and conduct system self-inspections and document results.
• Track, validate, and report corrective actions to the ISSM
• Support continuous monitoring activities, including review of audit logs, account activity, configuration changes, vulnerability status, and system security posture.
• Assist with configuration management and identify security-relevant changes that may require ISSM review or reauthorization.
• Ensure users receive required system security briefings, training, user agreements, and access authorizations before system access is granted.
• Monitor user compliance with classified system rules, including password/authentication protection, need-to-know, media handling, removable media restrictions, and reporting requirements.
• Support incident response for data spills, suspected compromises, audit anomalies, unauthorized activity, or other reportable security concerns
• Assist with maintaining authorization documentation, including SSPs, POA&Ms, risk assessments, security assessment results, contingency plans, configuration records, and authorization artifacts.
• Coordinate with the ISSM, FSO/AFSO, Insider Threat Program, IT, program leadership, and Government security representatives as required.
• Ensure classified systems are operated only within their approved authorization boundary, classification level, caveats, and accredited configuration

#CJ