Information System Security Officer

Job Summary

Leonardo DRS Land Systems is seeking a full time Information System Security Officer (ISSO) four our Goleta, CA facility.  As an ISSO, you will be challenged to stay current with the latest technological developments in information security.  You will be exposed to advanced technologies and will play a major role in identifying potential vulnerabilities and intrusions on Information Technology (IT) systems by our adversaries.  In this role, you will collaboratively assist the Facility Security Officer (FSO) with daily industrial security operations, support security education and training, and ensure compliance with DRS policies and procedures related to the 32 CFR part 117.  Together we'll address evolving threats to national security, thus keeping our nation and our warfighter safe. Successful candidates for this role will coordinate with the Corporate Risk Management Framework Support Center, other ISSOs, and Information System Security Managers (ISSM) across the company to obtain and maintain certifications and accreditations under the Defense Counterintelligence Security Agency (DCSA) and Intelligence Community (IC) Risk Management Framework.  If you are interested in information system security, industrial security, management, and the opportunity to obtain industry professional certifications on the job, please apply now!

Job Responsibilities

• Develop, implement, and administer security procedures for classified computer systems based on the Defense Counterintelligence Security Agency (DCSA) and other U.S. Government agency security requirements
• Apply current Computer Science best practices and technologies to the development, evaluation, and integration of computer systems and networks to maintain system security for classified information systems
• Serve as Assistant Facility Security Officer (AFSO) by supporting the Facility Security Officer (FSO) in ALL aspects of Industrial Security
• Serve as primary advisor to the Business Unit Information System Security Manager (ISSM) on all local classified Information Systems Security matters, and as liaison to the local Defense Counterintelligence and Security Agency (DCSA) Information Systems Security Professional (ISSP) on all matters pertaining to classified information systems
• Implement local policies, processes, procedures, and compliance with all National Industrial Security Program (NISP), Defense Information System Agency (DISA), and Defense Counterintelligence and Security Agency Assessment and Authorization Process Manual (DAAPM) requirements
• Develop and maintain all DoD requirements, including the DAAPM & Risk Management Framework (RMF) standards to ensure compliance with the National Industrial Security Program Operating Manual (NISPOM)
• Review and approve requests for access to cleared computer systems in the development and implementation of policies and System Security Plans supporting Corporate Security & Government agency requirements
• Conduct periodic self-inspections on local processes and practices to ensure compliance; accurately reports security posture to management & ensure corrective actions are taken
• Identify and document unique local threats and vulnerabilities to classified information systems security
• Conduct and coordinate investigations into security violations related to cleared information systems; ensures corrective actions are implemented
• Perform independently, or with a group, on department or enterprise-level security projects designed to enhance the security posture of DRS
• DISA STIG/SCAP implementation and management of security configurations utilizing Corporate ISSM toolkit
• Support, communicate, reinforce, and defend the mission, values, and culture of the organization
• Assist with execution of typical security related issues may include physical access to buildings, room, couriers, escort, clearances, packages, documentation, and debriefings
• Obtain access to and keep information current on required government websites to include: DISS, NBIS, SWFT, eMASS
• May serve as alternate COMSEC custodian
• Other duties as assigned

Qualifications

• Associate’s degree in Information System Security, Computer Science, Cybersecurity, Information Technology, and/or a Computer Technical Certificate (I.E. MSCE Server 2016, CCNA, GIAC certificate) or equivalent related experience
• 1 - 3 years of relevant experience
• Must be a United States Citizen and have a current active Security Clearance. This will be confirmed prior to offer
• Strong knowledge of information systems security components and best practices including firewalls, intrusion detection systems, anti-virus software, data encryption, and other industry-standard techniques
• Analytical ability to understand and interpret Department of Defense (DoD) and Company Security policies and procedures
• Knowledge of U.S. Government Information System security standards (i.e. NIST and ISO27)
• Highly self motivated and strong organizational skills and excellent attention to detail
• Strong interpersonal oral, written and communication skills
• Exceptional attention to detail
• Be a self-starter, able to work under pressure with limited supervision, and work well with others in a large and diverse environment
• Ability to successfully prioritize and manage to completion multiple complex tasks and deliverables, and demonstrate the highest degree of integrity and accountability in all actions
• Must complete CDSE Facility Security Officer Curriculum for Possessing Facilities course within six months from date of hire
• Willing and able to travel up to 25% of the time

Preferred Skills and Experience:

• A strong knowledge and understanding of NIST Special Publication 800-53, ISO27001, DoD 8510.01, NISPOM, & ICDs
• Experience troubleshooting Windows 10/11 Operating Systems
• Experience with the SCAP Compliance Checker and the DISA STIG Viewer
• Working knowledge of 32 CFR Part 117 National Industrial Security Program Operations Manual (NISPOM)