ISSO II

Kavaliro is Seeking a ISSO II in Fort Meade to support a Government Customer.

Find out if this opportunity is a good fit by reading all of the information that follows below.
Essential Duties & Responsibilities
Perform the duties of an Information System Security Officer (ISSO) as defined in AR 25-2, DA 25-2-14, and the NIST SP 800-53 security controls when the organizationally-defined personnel includes the ISSOActively manages the organization’s eMASS records which includes but is not limited to:Validates security controls including associated artifactsAssesses security scan results and STIGs as requiredPerforms POA&M updates, tracking, and resolutionLeads the continuous monitoring activities of the organizationManages the day-to-day activities and the professional development of the Cybersecurity AnalystsCollaborates with the O-ISSM on all assessment and authorization activities to ensure the information systems maintain an authority to operate (ATO) on all applicable DoD/IC networksMaintain up-to-date status on all assigned systems and communicate status to the Government leadsMaintain complete records of communications, submit written status reports as required, perform peer-review as directed, and attend weekly meetingsCorrespond with the Government customer and system administrators to communicate any unacceptable risks identified and correct deficient POA&M items to meet DoD and IC standardsCoordinate with the Security Control Assessor (SCA) to perform analysis of the overall risk level the system poses to enterprise networks and to mission dataCreate and maintain cybersecurity policies and standardsEnsure that cybersecurity plans, controls, processes, standards, policies, and procedures are aligned with cybersecurity standardsEnsures security scans and STIG checklists are updated according to DA G2 policyProduces actionable, risk-based reports on security assessment resultsAssists with vulnerability remediation when necessaryDevelops and maintains security plans and security testing plansPeriodically updates and improves risk models; metrics; reports; processes; and activities to stay compliant with evolving DoD and IC standardsEnsures the user community understands and adheres to necessary procedures to maintain security posture of the information systemsProvides guidance in the creation and maintenance of Standard Operating Procedures (SOPs); Tactics, Techniques, and Procedures (TTPs); and other similar documentation
Required Skills, Experience & EducationBachelors Degree with 10+ years of relevent experienceActive TS/SCI ClearanceMeet the DoD requirements for xzbcwsv a privileged user on a TS/SCI information system prior to starting work - DoD 8140 / 8570.01-m requirements15 years’ experience with the assessment and accreditation activities of national security systems (NSSs)10 years’ experience validating system security controls10 years’ experience with vulnerability management10 years’ experience with DISA Security Technical Implementation Guides (STIGs), DISA Security Requirements Guide (SRG), and vendor-specific security guides8 years’ experience with RMF and eMASS5 years’ experience with POA&M tracking and resolution3 years’ experience performing the continuous monitoring of system security controls
Desired Skills, Experience10 years’ experience as an ISSO on Army Intel programs2 years’ experience with AC2SP tenant assessment and accreditation activities