Information System Security Officer (ISSO)

Job Summary

This position supports information system security operations for complex C5ISR environments, ensuring systems comply with cybersecurity, authorization, and risk management requirements across their lifecycle. The role focuses on implementing and maintaining security controls, supporting authorization activities, and overseeing operational security practices.

Key Responsibilities

• Determine and document system security control requirements

• Implement and manage security controls within compliance and authorization tools

• Conduct annual security control reviews through testing, examination, and interviews

• Prepare, distribute, and maintain security plans, instructions, guidance, and SOPs for network and system operations

• Review, approve, or deny System Authorization Access Requests (SAARs), verify training requirements, and maintain required records

• Participate in removable media control and whitelisting programs

• Monitor and assess the effectiveness of cybersecurity safeguards to ensure adequate protection

• Support information security training and awareness initiatives

• Participate in security risk assessments as part of the Security Assessment and Authorization process

• Identify system-specific security requirements throughout all phases of the system lifecycle

Required Skills & Qualifications

• Completion of a CNSSI 4014 (Information Systems Security Officer–qualified) course or equivalent

• CompTIA Security+ certification

• Experience with Marine Corps information security programs, authorization procedures, and coordination with higher headquarters

• Active Secret security clearance

Preferred Qualifications

• Certified Authorization Professional (CAP) certification

• GIAC Security Leadership Certification (GSLC)

• Completion of CID M09BNJ1 Cybersecurity Technician course

• Completion of CID N23CUW1 Joint Cyber Analysis course

• Bachelors degree in Information Technology, Cybersecurity, or a related field

• Completion of CNSSI 4012 (Senior Systems Managers–qualified) course

• Completion of CNSSI 4013 (System Administrators–qualified) course

• Completion of CNSSI 4015 (Systems Certifiers–qualified) course

• Completion of CNSSI 4016 (Risk Analysts–qualified) course

• NDU Chief Information Security Officer (CISO) certificate