Fulltime Information System Security Officer (ISSO)

Key Responsibilities

Maintain the appropriate operational cybersecurity posture for assigned information systems.

Implement and enforce applicable Department of Defense and Department of the Air Force cybersecurity policies, procedures, and countermeasures.

Maintain RMF authorization artifacts and support system authorization activities throughout the system lifecycle.

Assist the ISSM in maintaining authorization packages and ensuring security controls remain compliant with RMF Rev 5 requirements.

Maintain evidence supporting implementation of applicable NIST SP 800-53 Rev. 5 security controls.

Support Continuous Monitoring (ConMon) activities, including:

Security control assessments

POA&M tracking

Security impact analyses

Annual reviews

Vulnerability remediation and closure

Maintain and update RMF authorization packages within Enterprise Mission Assurance Support Service (eMASS).

Analyze vulnerability scan results, assess mission risk, coordinate remediation activities, and maintain Plans of Action and Milestones (POA&Ms) through closure.

Monitor vulnerability results using approved DoD/DAF cybersecurity tools and provide status reporting to cybersecurity stakeholders and leadership.

Review system audit logs, security events, and cybersecurity alerts to identify potential compliance issues, anomalous activity, or indicators of compromise.

Coordinate investigative and corrective actions with system administrators, cybersecurity personnel, ISSMs, and other stakeholders.

Ensure system software, hardware, and firmware comply with applicable STIGs, SRGs, and security configuration requirements.

Support configuration management activities and conduct cybersecurity impact analysis prior to implementation of system changes.

Coordinate system modifications with the ISSM, Security Control Assessor (SCA), Wing Cybersecurity Office, system administrators, and other technical stakeholders.

Prepare information systems for Security Control Assessments, inspections, cybersecurity evaluations, and authorization reviews.

Coordinate the collection and validation of cybersecurity evidence and remediation of assessment findings.

Ensure authorized users possess appropriate security clearances, need-to-know, and required cybersecurity training before system access is granted.

Maintain required user access-control documentation.

Report cybersecurity incidents and vulnerabilities through appropriate Air Force and DoD reporting channels.

Support cybersecurity exceptions, deviations, and waiver processes as required.

GEOINT / Mission-System Responsibilities

Support cybersecurity compliance and risk-management activities for Geospatial Intelligence (GEOINT), geospatial, and mission-planning information systems operating in classified environments.

Help protect geospatial data, mission products, intelligence information, and supporting mission-system infrastructure in accordance with Air Force and DoD cybersecurity requirements.

Support cybersecurity activities involving geospatial applications, data repositories, mission-processing environments, and associated networks