Information Systems Security / Information System Security Officer (ISSO)

• Information System Security Officer - responsible for supporting the day-to-day security oversight of classified information systems and ensuring users, systems, and processes remain compliant with NISPOM Rule, DCSA/CSA guidance, approved security documentation, and local procedures.
• Ensure compliance - with the approved System Security Plan (SSP), security policies, procedures, and system-specific requirements.
• Support the ISSM - in maintaining the classified information system security program.
• Coordinate and conduct system self-inspections and document results.
• Track, validate, and report corrective actions to the ISSM
• Support continuous monitoring activities, including review of audit logs, account activity, configuration changes, vulnerability status, and system security posture.
• Assist with configuration management and identify security-relevant changes that may require ISSM review or reauthorization.
• Ensure users receive required system security briefings, training, user agreements, and access authorizations before system access is granted.
• Monitor user compliance with classified system rules, including password/authentication protection, need-to-know, media handling, removable media restrictions, and reporting requirements.
• Support incident response for data spills, suspected compromises, audit anomalies, unauthorized activity, or other reportable security concerns
• Assist with maintaining authorization documentation, including SSPs, POA&Ms, risk assessments, security assessment results, contingency plans, configuration records, and authorization artifacts.
• Coordinate with the ISSM, FSO/AFSO, Insider Threat Program, IT, program leadership, and Government security representatives as required.
• Ensure classified systems are operated only within their approved authorization boundary, classification level, caveats, and accredited configuration

#CJ