Information Assurance III Information System Security Officer (ISSO)

DLS Engineering is seeking an Information Assurance III Information System Security Officer (ISSO) professional for a full-time position in support of the Air Force Intranet Control (AFINC) program at Gunter Annex in Montgomery, Alabama. This is an on-site position.

• Performs security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standards.
• Implements the Assessment and Authorization (A&A) processes under the Risk Managed Framework (RMF) for new and existing information systems. 
• Facilitates development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA) and Risk Acceptance Letters.
• Develop an Information System Continuous Monitoring (ISCM) strategy and monitor any proposed or actual changes to the system and its environment to maintain compliance. Audit systems to ensure security posture integrity. 
• Conduct assessments and test/analysis data to document state of compliance with security requirements. Conduct risk assessments and investigations, recommend implementation of risk mitigations, and coordinate incident response activities. Conduct periodic hardware/software inventory assessments. 
• Supervise the development and deployment of program information security for all program systems to meet the program and enterprise requirements, policies, standards, guidelines and procedures.
• Manages assigned team to facilitate effective execution of Risk Management Framework  (RMF).  Coordinate and participate in security assessments and audits.  Prepares, reviews, and presents technical reports and briefings.
  
  

• 5+ years of experience with DoD cybersecurity policies and implementation of Risk Management Framework (RMF): e.g. NIST SP 800 series, CNSSI 1253.
• Prior experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs. 
• Experience in assessing and documenting test or analysis data to show cybersecurity compliance.
• 3+ years of experience in utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include: NESSUS, ACAS, DISA STIGs, Audit Tools, ESS, eMASS, PPS.
• IAM-II Certification: CISM, CISSO, CISSP, CISSP-ISSMP, FITSP-M, GCIA, GCIH, GCSA, GICSP, or GSLC
• Must be certified in governance, risk, and compliance (CGRC)
• Must be a US citizen
• Must hold a current Top Secret clearance with SCI Access (TS/SCI) or an active Secret clearance.

• We offer a competitive salary and a 401k program with company match.
• We offer a comprehensive benefits package including health, vision, dental, life, and disability insurance.
• We offer a generous paid time off package
• If accommodation is needed with the application and / or the interview process for applicants with disabilities, please contact Human Resources at 757-494-5151.
• DLS is an E-Verify company.
• DLS is an equal employment opportunity employer. Qualified applicants will receive consideration without regard to age, race, religion, sex (pregnancy, sexual orientation, gender identity), national origin, or disability. We encourage all qualified applicants to apply. If you believe you have been discriminated against, please contact Barbara Ellison. You also have the right to file a charge of discrimination with the equal employment opportunity commission.
• Must be able pass a government background check, which will be completed before employment.