Information System Security Officer​/ISSO

Job Category:
Security
Time Type:
Full time
Minimum Clearance Required to Start:
Top Secret
Employee Type:
Regular
Percentage of

Travel Required:

Up to 10%
Type of Travel:
Continental US

The Opportunity:

CACI is looking for an Information System Security Officer (ISSO) to support our DoD customer to implement an enterprise IT service delivery model that provides consistent, secure, high-quality, and cost-effective services to enable mission success and improve end user experience across the customer environment. On this program, CACI will deliver enhanced capabilities and services to implement and operate an enterprise ITSM solution, enterprise service desk, endpoint management and security solution, as well as CONUS/OCONUS field support and life cycle support for end user devices to enable the DoD customer to transition focus from IT operations to mission operations.

Responsibilities:

• Verify that all requirements for system access to an Information System are met and that there is a signed Acceptable Use Agreement on file.
• Assist in the preparation, distribution, coordination and maintenance of plans, instructions, policies, guidance, and standard operating procedures necessary for implementation of the Organization’s IA program and serve as the subject matter focal point for the Organization’s IA program.
• The ISSM in ensuring that a Certification and Accreditation package is prepared and maintained in accordance with (IAW) the DoD Information Assurance Certification and Accreditation Process (DIACAP), or the DoD Risk Management Framework (RMF).
• Overseeing System Owners to ensure they follow established IS policies and procedures.
• Reviews weekly bulletins and advisories that impact security of site information systems to include, RCERT, ACERT, IAVA, and DISA ASSIST bulletins.
• Provide clear and accurate reporting of current IAVA’s and statuses of implementation to ensure the security and health of our environment.
• Provide support for the Department of the Air Force (DAF) Continuous Monitoring and Risk Assessment (CORA) process, ensuring alignment with security controls, risk management frameworks, and compliance requirements for cybersecurity assessments. Assist in the development, review, and management of CORA documentation, supporting ongoing evaluation and mitigation of security risks within DAF systems.
• Implementing and enforcing IS security policies.
• Ensuring approved policies and procedures are in place capturing the organization’s requirements regarding all of the NIST 800-53r5 families. The ISSO will assist in updating policies and procedures when changes occur or periodically.
• Ensuring development and implementation of procedures in accordance with configuration management (CM) policies and practices for authorizing the use of hardware/software on an IS. Any changes or modifications to hardware, software, or firmware of a system must be coordinated with the ISSM/ISSO and appropriate approving authority prior to the change.
• Responding to security incidents, and for investigating and reporting (to the IAM and ISSO and to local management) security violations and incidents, as appropriate.
• Serving as a member of the Change Advisory Board and Demand Approval Board.
• Working knowledge of system functions, security policies, technical security safeguards, and operational security measures.
• Attending required technical (e.g., operating system, networking, security management, Sys Admin) and security training relative to assigned duties.
• Ensuring that proper decisions are made concerning levels of concern for confidentiality, integrity, and availability of the data, and the protection level for confidentiality for the system.
• Reporting all security-related incidents to the ISSM and Security Incident Response Team.
• Initiating protective and corrective measures when a security incident or vulnerability is discovered, with the approval of the ISSM or System Owner.
• Developing and maintaining an accreditation/certification and assessment/authorization support documentation package for system(s) for which they are responsible.
• Conducting Continuous Monitoring in line with the…