Information Systems Security Officer – SME

Key Responsibilities:

• Perform all ISSO functions for all NCS systems
• Conduct Certification and Accreditation (C&A) activities for all NCS systems
• Maintain C&A packages in CSAM
• Conduct monthly control assessments
• Provide audit support for OIG and external audits
• Execute Contingency and Incident Response Plan activities
• Ensure security of all systems meets or exceeds DOJ Security Standards
• Configuration, deployment, and ongoing operational tasks supporting Insider Threat
• Assist Justice Security Operations Center (JSOC) and Insider Threat Center with incident response and handling
• Provide support to Intelligence Community's Enterprise Audit Security Initiatives including configuration, deployment and ongoing operation of security products
• Attend department meetings regarding security initiatives
• Attend high-level meetings with various Government organizations regarding security requirements
• Schedule and oversee security and system training per NCS schedules and procedures
• Maintain and register inventory of Cross Domain Solutions (CDS)
• Develop, deploy, and implement compliant CDS
• Monitor and audit user accounts with access to CDS
• Utilize DOJ ITSM system for ticketing, incident and service request management
• Provide onsite staff Monday through Friday during core business hours at 2Con, 3Con and RFK
• Travel as required to CONUS/OCONUS sites

100% onsite

• Active Top-Secret clearance (TS/SCI is preferred)
• 10+ years progressive information security experience
• Specific work experience in providing IT program support for the Federal Government
• Familiarity with current and emerging technologies and their potential impact to the Department
• CISSP, CISM, or CAP certification preferred
• Ability to provide onsite support and travel CONUS/OCONUS
• FISMA/RMF/NIST compliance
• Certification & Accreditation (C&A)
• CSAM package management
• Continuous monitoring & assessment
• Audit support (OIG and external)
• Contingency & Incident Response planning
• Insider Threat program support
• Cross Domain Solution (CDS) management
• Intelligence Community security initiatives
• Security product configuration & deployment
• DOJ Security Standards expertise
• Microsoft desktop client technologies
• ITSM system utilization