OVERVIEW:
This position functions in an environment with exposure to broad sections of cutting edge technology and communications research. As such, the ISSO has an opportunity to apply previous knowledge and problem solving skills to customize requirements to meet specific customer needs. This position provides as much an opportunity to learn and grow as it does to help provide cyber security to a dynamic research environment.
The ISSO will interface with business and technical staff to define and analyze security requirements, and audit these requirements regularly to ensure appropriate security controls are operating correctly and as intended.
GENERAL DUTIES:
- Develops, documents and implements information security procedures to enforce compliance with information security standards and policy.
- Manage the SSP process for all current SSPs and new SSPs.
- Establishes metrics to ensure continuous improvement and ongoing compliance.
- Performs regular audits (system & program level) to monitor, measure, and report on compliance and identify residual risk.
- Conducts vulnerability analysis and threat assessments.
- Evaluates security products and recommends solutions for control enhancement.
- Provides ongoing analysis and assessment in support of incident response activities.
- Evaluates and assesses systems to support compliance verification.
- Participates in disaster recovery and business continuity planning, testing, and operations.
- Tests and evaluates incident response, disaster recovery, and business continuity plans.
- Provides subject matter expertise on information and technology related initiatives.
- Develops programs and conducts education and training in support of security awareness.
REQUIRED QUALIFICATIONS:
- 7+ years acting as an ISSO/ISSE.
- CISSP or CASP certification or equivalent certification required.
- In depth knowledge of NIST and the Certification and Accreditation Process.
- Bachelor's Degree in Computer Science, Information Assurance or related discipline.
DESIRED QUALIFICATIONS:
- Technical experience working with systems (Linux, Windows, etc.)
- Excellent communication skills (written and oral)
CLEARANCE:
- Full Scope Polygraph minimum
