Information Systems Security Officer (ISSO)

Job Type: Regular Information Systems Security Officer (ISSO)    The Information Systems Security Officer (ISSO) is responsible for providing compliance and oversight of all of RAND Corporation’s Authorization and Accreditation (A&A) requirements, maintaining policies and procedures in accordance with the Defense Intelligence Agency (DIA), Defense Counterintelligence Security Agency (DCSA), Intelligence Community (IC), and other Department of Defense (DoD) regulations as applicable.  Additionally, the position manages the Sensitive Compartmentalized Information (SCI) and Special Access Program (SAP) Information Systems (IS) to ensure that all classified IS remain accredited, executes required functions as defined by the IC, DoD and Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) in support of the local Information Systems Security Manager (ISSM), Corporate ISSM, Manager, Security Operations, and Executive Director, Security & Classified Operations and Chief Security Officer, and provides services for individuals within the accredited systems.  Duties   Implements, monitors and maintains RAND’s Security Manual and procedures for DoD, IC and SAP programs and other applicable government sponsor regulations  Enforces corporate policies to support ICD’s, DAAPM, JSIG and other CI standards.  Enforces compliance with current Security Technical Implementation Guides (STIGs) for all applicable systems  Interfaces with and supports clients in the operation and security of the classified systems  Assists the ISSM in establishing, communicating, and improving the collateral and SCI/SAP      Information Systems (IS) Security Program  Responsible for the preparation and sustainment for internal self-inspections.  Assesses changes by performing periodic self-inspections, tests and reviews of the classified IS program to ensure that systems are operating as authorized/accredited and that conditions have not changed  Participates in the planning, installation, implementation, upgrade, problem determination and resolution involving software programs, operating systems, computers, printers, scanners, etc. for collateral and SCI/SAP systems.  Provides budget requirements to the ISSM for the sustainment of the collateral SCI/SAP systems   Ensures protocols are followed for the investigation(s) and resolution of security incidents  Collaborates with the system and network administrators to ensure audit features are configured and enabled correctly  Performs weekly audits and ensures administrative inquiries/investigations into anomalies found during audit trail analysis are reported to the ISSM for follow on actions  Develops and implements the System Security Plans (SSP) and addendums for the facility  Performs other duties as assigned  Education   High school diploma or GED required.  BS/BA degree preferred.   Experience   A bachelor’s degree in a related field is preferred.…