Information Systems Security Analyst (ISSA)

Role Overview

ISSA Functions

• Conduct RMF Information Assurance Package security inspections, tests, and reviews to help maintain an Authority to Operate.
• Update eMASS artifacts and information to validate security controls and assessments.
• Develop POA&Ms for non-compliant items.
• Maintain a formal information system security program, including security plans, cybersecurity policies, control assessments, and contingency plans.
• Maintain configuration management, incident response, risk management, vulnerability scanning, and vulnerability management plans.
• Ensure software, hardware, and firmware comply with applicable security configuration guidelines.
• Ensure cybersecurity events and configuration changes affecting Air Force IT authorization or security posture are formally reported.
• Coordinate eMASS-related tasks with the Air National Guard Readiness Center RMF lead.

Required Experience and Knowledge

• 1+ years of experience working on ATOs for government systems.
• Ability to manage POA&M documents associated with information systems.
• On-the-job knowledge of the RMF process and NIST SP 800-53 and NIST SP 800-37.
• Experience developing and maintaining certification and accreditation documentation.
• Excellent writing, verbal communication, and time-management skills.

Education and Certification

• No education is required.
• A bachelor’s degree in Information Systems, Information Assurance Management, Computer Science, or a related field is preferred and may be substituted for relevant work experience.
• An IAT Level II or IAM Level II DoD-approved cybersecurity baseline certification, or higher, is required.

Security Clearance

• US citizenship and the ability to obtain and maintain an active Secret or higher clearance are required by the contract.