ISSM

Information Systems Security Manager (ISSM)

Required:

• Active Clearance:
  Top Secret (TS), SCI preferred (Immediate eligibility for SCI/SAP required)
• Ability to work onsite at Shaw AFB, SC
• Minimum of five (5) years of IT experience
• CompTIA Security+ certification meeting DoD 8570.01-M IAT Level II position requirements
• Must obtain CISSP within six months of assignment

Function:

• Serves as Wing Information Assurance Officer (IAO) for Advanced Programs, responsible for planning, analysis, acquisition, design, development, implementation, quality assurance, configuration, installation, integration, maintenance testing, operational integrity, and systems security of Automated Information Systems and classified LAN/WAN systems supporting the Wing Advanced Program Office and associated Special Access Program Areas.
• Assists the Wing Program Manager in developing Wing-level guidance for applying security policy, procedures, techniques, equipment, and methods to a variety of work situations and levels of security controls. Researches, interprets, and applies National, DoD, DCID, JAFAN, USAF, and MAJCOM policies for classifying and protecting special access program systems, national defense, and other sensitive information.
• Certifies special access AIS to ensure compliance with governing directives and procedures. Coordinates approval of AIS with USAF and MAJCOM. Conducts initial isolation and containment of AIS involved in improper configuration and usage.
• Advises GSSO and information systems security representatives on proper methods of handling, destruction, and storage of AIS media.
• Assists the Wing Program Manager in developing and implementing established security policies, practices, procedures, and techniques to a variety of organizations or situations that differ in kind and level of security, complexity, and local conditions or circumstances requiring adjustment or modification of established approaches.
• Assesses circumstances to determine if a deviation from standard security and investigative standard is warranted and justifies the approval of temporary waivers.
• Assists unit-level Information Assurance Officers in implementing AIS security education programs. Advises IAOs of security training requirements, changes in security procedures, publication of security directives, and enhancements designed to increase security of AIS. Conducts Information Assurance Awareness Program training for both initial and recurring information protection training. Maintains required course records.
• Develops methods of adapting regulations to local serviced organizations. Gives security briefings to new employees during orientation and at other times when necessary. Coordinates plans and schedules with other organizations and customers as appropriate.
• Assists the Wing Program Manager in performing self-inspection and presents detailed and comprehensive reports with any corrective action taken by the wing. Follows up to ensure complete and quality resolution of discrepancies. Assesses policies and procedures as needed to find ways to improve quality, timeliness, and efficiency of work.
• Manages the Network Security Program. Implements and advises on IT security policies and procedures to ensure protection of information transmitted to the installation, among organizations on the installation, and from the installation using LAN, WAN, or other communications modes.
• Utilizes current and future multi-level security products collectively to provide data integrity, confidentiality, authentication, non-repudiation, and access control of the LAN. Reports to USAF and MAJCOM all incidents involving viruses, tampering, or unauthorized system entry. Implements guidance to ensure the protection of Internet information and reduce the risk associated with automated processing of information/data.
• Administers customer accounts, creates and deletes user accounts, assigns and resets passwords, and ensures firewalls are installed to decrease possibility of virus infiltration. Controls access to prevent unauthorized persons from using network facilities. Limits access to privileged programs, utilities, and security-relevant programs/data files to…