Information Systems Security Officer

PRIMARY FUNCTION

Strait Sys is seeking an Information Systems Security Officer. In this role, you will be responsible for maintaining the security posture of Army's IT systems by managing security controls, conducting risk assessments, ensuring compliance with regulations, overseeing authorization packages, monitoring vulnerabilities, and responding to incidents to protect confidentiality, integrity, and availability of data. Key duties involve developing security plans, performing continuous monitoring, managing POA&Ms (Plans of Action & Milestones), and collaborating with stakeholders to build a strong security culture.

• Supports all aspects of Risk Management Framework (RMF) processes tailored to include minimum cybersecurity standards and demonstrate competency with specific experience in Cyber Security, Engineering, Test & Evaluation (T&E), and/or Security Control Assessor (SCA) under a Certification & Accreditation (C&A) and/or Assessment & Authorization (A&A) process.
• Function as a representative for cybersecurity matters, including reporting requirements, data calls, Army CIO requirements, as well as legal and compliance matters relating to IT security.
• Design, implementation, and support of cybersecurity artifacts.
• Actively participate in IT and security meetings.
• Manage the ATO process for Army tactical missile systems and assets, including control implementation and documentation. Comfortable utilizing eMASS to document to meet this goal.
• Conduct testing and audit log reviews to evaluate the effectiveness of current security measures. Directs and implements the necessary controls and procedures to cost-effectively protect information systems assets from intentional or inadvertent modification, disclosure, or destruction.
• Monitor security of electronic data, application system usage, networks, and physical environment.
• The specialist is expected to evaluate security solutions to ensure they meet security requirements for processing up to classified information and supervise and/or maintain the operational security posture for an information system or program.

Required

• Ability to lead an Army program to meet all documentation, artifact, and eMASS cyber security management requirements to achieve an Authority to Operate (ATO) for an Army tactical system.
• Skilled in providing technical support in the areas of vulnerability assessment, risk assessment, network security, product evaluation, and security implementation.
• Versed in design of information system contingency plans and other deliverables which maintain appropriate levels of protection and meet time requirements for minimizing operations impact to customer organization as well as Security Authorization and Assessment (A&A) processes.
• Strong writing skills to develop and maintain System Security Plans (SSP), Contingency Plans, Privacy Impact Assessments, Certification Reports, Accreditation Reports, Plan of Action & Milestones (POA&M), and other C&A documentation.
• Demonstrates oral and written communication skills to work closely with all levels of personnel involved in IT operations and technical aspects of systems.
• Familiarity with security policies & guidance documents to assist with the preparation and maintenance of process artifacts and traceability documents purposed for compliance with Authority to Operate (ATO) requirements.

Preferred

• Familiarity and/or previous experience with a tactical Army systems.

• Must be a US Citizen.
• Active Secret Clearance
• Greater than one-year minimum practical experience as an ISSO familiar with eMASS, ACAS/ Nessus scans, applying STIGs, etc.
• Familiarity with cybersecurity and IT security matters, including documentation requirements and security control implementation.
• Ability to successfully pass a pre-employment drug test.
• Must be a self-starter who does not shy away from challenges and hard work.

Preference will be given to Calista shareholders and their descendants and to spouses of Calista shareholders, and to shareholders of other corporations created pursuant to the Alaska Native Claims Settlement Act, in accordance with Title 43 U.S. Code 1626(g).

Additionally, it is our policy to select, place, train and promote the most qualified individuals based upon relevant factors such as work quality, attitude and experience, so as to provide equal employment opportunity for all employees in compliance with applicable local, state and federal laws and without regard to non-work related factors such as race, color, religion/creed, sex, national origin, age, disability, marital status, veteran status, pregnancy, sexual orientation, gender identity, citizenship, genetic information, or other protected status.

When applicable, our policy of non-discrimination applies to all terms and conditions of employment, including but not limited to, recruiting, hiring, training, transfer, promotion, placement, layoff,…