- Oak Ridge, Tennessee, United States
- On-site
- Full-time · Mid
- $70K–$103K per year
- 5+ years
The Information Systems Security Officer (ISSO) will be responsible for ensuring development and proper implementation of the security controls documented in the System Security Plan (SSP) for all information systems for which the ISSO is responsible, including sensitive networks and National Security Systems supporting business, special purpose, and security functions.
Compensation
The base salary range for this position in Tennessee (US-TN) at the start of employment is expected to be between $70,000 and $103,000 per year.
Responsibilities
- Ensure implementation of protection measures documented in the SSP for each information system for which they are the ISSO
- Maintain the SSP and associated artifacts, including risk assessments, Privacy Impact Assessments, vulnerability assessments, Plans of Action and Milestones POA&Ms, etc.
- Ensure that security controls for information system resources are based on the least privilege principle and develop alternative solutions to mitigate risk when the most desirable security controls cannot be fully implemented
- Identify, in coordination with the ISSM, and document in the SSP, unique threats to information systems for which they are responsible
- Provide technical assistance with the initial set-up, secure deployment, and proper management of systems that support information security including virus detection, application whitelisting, centralized logging, data loss prevention, and intrusion detection systems
Requirements
- Bachelor’s degree in a related Information Technology field