Information System Security Officer (ISSO)

The goal of information security is to help the business process owner accomplish the mission in a secure manner.

To be successful, ISSOs need to know and understand the following:

• Coordinates with the ISO to ensure the appropriate operations security posture is maintained for the Information system
• Servers as principal advisor on all matters involving the security of an Information System
• Manage day-to-day security operations of the system
• Monitors information system and environment
• Manages and controls changes to the system
• Handles incidents
• Assists in the development of the: Security policies and procedures, Development and ongoing maintenance of the System Security Plan, Security Impact Analysis, Mission and business functions of the Information System
• How the system supports the organization’s mission - System details, including: Architecture System components (hardware, software, peripherals, etc.)

of each system component Data flow Interconnections (internal and external) Security categorization, Security requirements, Configuration management processes and procedures

• Architecture
• System components (hardware, software, peripherals, etc.)
• Location of each system component
• Data flow
• Interconnections (internal and external)
• Security categorization, Security requirements, Configuration management processes and procedures

• Two or more years of proven Governance, Risk and Compliance (GRC)

or related role

• Strong knowledge of security principles, practices, and technologies
• Experience with security assessment tools and techniques
• Excellent problem-solving and analytical skills
• DoD/Military Training: 531-25B30-C45, J-3B-0440, DAU ISSM Basic Playlist, RMF Implementers Course or equivalent

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Data Science, Software Engineering, or Information Technology (from an ABET accredited or NCAE-C-designated institution)

Must have one of the following certifications:

• CompTIA Security +, CASP+, CISM, CISSP, CCISO, CCSP, CGRC/CAP, Cloud+, GSEC, SSCP, CISSO, CISSP-ISSMP, FITSP-M, GCIA, GCIH, GCSA, GISCP, GSLC

• Active Secret clearance is required.
• Must be a US Citizen and pass a background check.
• Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC’S Client(s)/Customer(s)/Prime contractor(s).

FEDITC, LLC. is committed to fostering an inclusive workplace and provides equal employment opportunities (EEO) to all employees and applicants for employment. We do not employ AI tools in our decision-making processes. Regardless of race, color, religion, sex (including pregnancy), sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran, FEDITC, LLC. ensures that all employment decisions are made in accordance with applicable federal, state, and local laws. Our commitment to non-discrimination in employment extends to every location in which our company operates.