Information Systems Security Officer(ISSO), Mid (MCSES III)AMERICAN SYSTEMS

AMERICAN SYSTEMSis an employee-owned federal government contractor supporting national priority programs through our strategic solutions in the areas of Information Technology, Engineering & Analysis, Test & Evaluation, and Training.

Responsibilities:

• Maintain the appropriate operational security posture for assigned Information Systems (IS)and networks in accordance with cybersecurity policies, directives, and Information Assurance (IA) Standard Operating Procedures (SOP).
• Ensure the Confidentiality, Integrity, and Accessibilityof all IS resources, organic to the supported organization, maintain a high level of operational availability.
• Serve as the principle technical advisor to the Information Systems Security Managers (ISSM), Program Security Officers (PSO), and Delegated Authorizing Officials (DAO).
• Perform functional duties, as the alternate ISSM, to maximize operational readiness and effectiveness.
• Provide expertise, to maintain the Authority to Operate (ATO) and Authorization to Connect (ATC) for assigned IS, ensuring Risk Management Framework (RMF)compliance.
• Provide support to Program Management Offices (PMOs), by conducting site surveys and providing technical information, to develop RMF artifacts to support ATO/ATC and to facilitate IS deployments and successful integration.
• Perform IS lifecycle management to facilitate requirements engineering, procurement, integration, operational sustainment, and destruction.
• Provide the organization, subject matter expertise to prepare for cybersecurity, physical and personnel security assessments from senior management .
• Perform cybersecurity assessments for IS, within your area of responsibility, on a regular and consistent basis to identify potential vulnerabilities, evaluate the effectiveness of existing security controls, and ensure compliance with relevant policies and regulations.
• Develop supporting documentation, such as Plan of Action and Milestones (POA&M) and inspection reports, to coordinate events, capture discrepancies, and document remediation strategy for supported organizations.
• Develop and integrate policy and procedures to reinforce Access Controls (AC) for identified vulnerabilities.
• Participate in professional engagements with supporting and supported organizations, for successful collaboration, and to ensure assigned projects deliver desired results.
• Develop and maintain IS documentation to capture changes to the system, its operating environment, and to advice the Configuration Control Board (CCB) on ATO/ATC conflicts.
• Conduct cybersecurity audits and maintain audit record management, ensuring audit records are collected, reviewed, documented, and archived.
• Complete necessary, initial/annual, training to establish and maintain access to supported systems and networks.