Information System Security Officer (ISSO)

About the role

Amentum is hiring an Information System Security Officer (ISSO) who reports directly to the Information Systems Security Manager and supports the manager in developing and managing operational information systems security policy, procedures and guidelines. The ISSO prepares, reviews and updates authorization packages and ensures approved procedures exist for clearing, sanitizing and destroying hardware and media. The role is a day-shift position, five days a week, eight hours a day.

Key responsibilities

• Review information systems periodically to ensure compliance with the security authorization package and notify the ISSM of changes that could affect authorization determinations.
• Coordinate changes to hardware, software or firmware with the ISSM and the AO/DAO before they happen.
• Monitor system recovery processes so security features and procedures are restored and working correctly.
• Keep security documentation current and accessible, collect and document audit records including anomalies.
• Complete required technical and security training (operating systems, networking, security management).
• Run the cyber security part of the self-inspection, coordinate and review system assessment plans, and identify vulnerabilities and help implement countermeasures.
• Prepare reports on the status of security safeguards applied to computer systems.
• Comply with site environmental health and safety requirements and perform other reasonable duties.

Required profile

• Minimum 2 years of experience; extensive experience in a current ISSO role with IA certifications may suffice for a degree.
• Bachelor's degree in a related field.
• US citizenship, at least 18 years old, fluent in English; the position is safety-sensitive and requires a drug-free workplace agreement.
• Secret/NV1 clearance required: minimum Secret clearance for US citizens, Australian NV-1 for Australians.
• Preferred: prior experience as a system or network administrator or ISSO, Linux experience, knowledge of databases, spreadsheets and technical report writing, excellent communication skills, teamwork and customer focus.

Required skills

• Experience with ICD 503 and the Risk Management Framework (RMF)
• DoD 8570.1 certification requirements met as an Information Assurance Technical Category II (IAT II) minimum
• Desirable: CISSP, Security+, MCSA or equivalent