Information System Security Officer

The Senior Information System Security Officer (ISSO) supports the Information System Security Manager (ISSM) in protecting and accrediting mission-critical Air Force and Department of Defense information systems. This position conducts cybersecurity research and analysis, develops Risk Management Framework (RMF) and Cross Domain Solution accreditation documentation, evaluates network architectures and security exception requests, and implements applicable DoD, DISA, CSSP, USCENTCOM, and Authorizing Official requirements. The Senior ISSO also maintains security records and approved-product libraries, tracks and reports security events, interprets information assurance policies, and provides IT management, reporting, briefing, training, and CONUS/OCONUS travel support as required.

AFCENT's mission is to deliver combat-ready air, space, communications, and cyberspace capability for USCENTCOM, helping maintain security and stability throughout Southwest Asia. We support the AFCENT Commander, USCENTCOM, coalition and joint partners, and warfighters who rely on NIPRNet, SIPRNet, partner networks, and other command-and-control systems. The AFCENT NOSC program is focused on running and protecting a 24/7 enterprise network and systems operations, including cybersecurity, engineering, maintenance, and technical support, keeping the AFCENT's theater communications and IT infrastructure ready, secure, and available to effectively execute the AFCENT mission.

Since 1976, SMS has specialized in modernizing legacy IT and sustaining complex enterprise environments for federal agencies. With the goal of building long-term partnerships with our customers, we invest in our employees by providing the training, tools, and support they need to keep critical missions operational, improve performance, and reduce risk. SMS is headquartered in McLean, Virginia, with offices and on-site operations at customer locations throughout the United States. For additional information on SMS, visit www.sms.com.

Submit your resume today!

Job Responsibilities

• 
  

  Assist the ISSM by conducting research, analysis, and creating documentation in support of the RMF process.

  
  
• 
  

  Analyze, evaluate and recommend the application of Air Force systems accreditation and certification procedures for existing and planned network architectures.

  
  
• 
  

  Research, process and recommend approval of Firewall and Bluecoat Exception Requests.

  
  
• 
  

  Process requests for removable media.

  
  
• 
  

  Complete accreditation documents as outlined by DISA Risk Management Framework (RMF), Cybersecurity Service Provider (CSSP), USCENTCOM, and Authorizing Official (AO) guidance.

  
  
• 
  

  Maintain Enterprise Products List (EPL) and Accreditation Library for all approved products and systems and evaluate service level agreements.

  
  
• 
  

  Prepare and process accreditation documents for Cross Domain Solutions.

  
  
• 
  

  Research, analyze and document Information Assurance and Security polices and assist with interpretation of local policies.

  
  
• 
  

  Track, document, and report all security related events and prepare relevant documentation for ISSM and AO review.

  
  
• 
  

  Implement and enforce DoD Information System, Platform Information Technology (PIT) systems cybersecurity policies and procedures as defined by relevant cybersecurity-related documentation.

  
  
• 
  

  Provide General IT Management support.

  
  
• 
  

  Provide documentation/reports support as required.

  
  
• 
  

  Provide meetings/briefings support as required.

  
  
• 
  

  Provide functional training support as required.

  
  
• 
  

  Provide OCONUS deployment/TDY travel support as required.

  
  
• 
  

  Provide CONUS TDY support as required.

  
  

Required Qualifications

• 
  

  B.S. in related field and 5 or more years' relevant Information Security experience; or, 7 or more years' relevant Information Security experience.

  
  
• 
  

  Firewall experience

  
  
• 
  

  Ability to implement system security measures in accordance with established procedures to ensure confidentiality, integrity, availability, authentication, and non-repudiation.

  
  
• 
  

  Must possess experience and demonstrate an understanding of Risk Management Framework, National Institute of Technology and Standards (NIST) Cyber Framework, DoD and Service-level Instructions/Directives/Policies, and Cyber Security Regulations/Best Practices.

  
  

Certifications Required

• 
  

  CISSP

  
  

• 
  

  ITIL Foundation (candidate has up to 60 days to acquire ITIL Foundation certification)

  
  

Clearance Required

• Department of Defense TS/SCI

SMS is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.