IT Security Specialist - ISSO - Information Systems Security Officer

IT Security Specialist – ISSO

Position:
Information Systems Security Officer (ISSO)

Company: BAE Systems, Inc.

Location:

Minneapolis, MN (Osseo)

We are hiring an IT Security Specialist to serve as the Information Systems Security Officer, responsible for ensuring the security and integrity of our organization’s information systems and data. The ideal candidate has a strong technical background and a passion for information security.

• System Security Oversight:
  Ensure systems are operated, maintained, and disposed of in accordance with security policies and procedures outlined in the security plan.
• Program Implementation:
  Verify the implementation of delegated aspects of the system security program.
• Account Management:
  Ensure proper account management documentation is completed prior to adding and deleting system accounts.
• Documentation Management:
  Verify all system security documentation is current and accessible to properly authorized individuals.
• Risk Assessment and Mitigation:
  Conduct periodic assessments of authorized systems, identify vulnerabilities, and provide corrective actions to the Information System Security Manager (ISSM).
• Audit and Compliance:
  Ensure audit records are collected and analyzed in accordance with the security plan.
• Incident Response:
  Report all security-related incidents to the ISSM.
• System Recovery:
  Monitor system recovery processes to ensure security features and procedures are properly restored and functioning correctly.
• Change Management:
  Formally notify the ISSM of any changes to a system that could affect authorization.
• Configuration Control:
  Serve as a member of the Configuration Control Board (CCB), if designated by the ISSM.

• Security Policy and Compliance:
  Conduct regular reviews and updates of security policies to ensure they remain relevant and effective.
• Provide guidance and training to employees on security policies and procedures.
• Risk Management:
  
  Identify, assess, and mitigate potential security risks to the organization’s information systems and data.
• System Security:
  Conduct regular security assessments and vulnerability scans; implement security controls such as firewalls and intrusion detection systems.
• Incident Response:
  Develop and implement incident response plans; identify and classify incidents, and collaborate with incident response teams.
• Vulnerability Management:
  Execute continuous monitoring strategy; conduct vulnerability scans and penetration testing; develop remediation plans.
• Security Awareness & Training:
  Develop and deliver training programs to educate employees on security best practices.
• Audit and Compliance:
  Coordinate with internal and external auditors; conduct regular audits and assessments.
• Technical Security:
  Provide expertise in threat analysis, vulnerability assessment, and penetration testing.
• Communication and
  
  Collaboration:
  
  Communicate risks to stakeholders; develop relationships with external partners and vendors.
• Continuous Improvement:
  Complete required training within 6 months; monitor and review security policies; develop improvement plans.

• Bachelor's Degree and 6 years work experience or equivalent.
• Experience in Information Security, vulnerability/risk analysis, security policy, risk management, and system security.
• Experience with System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrix (SR TM).
• Experience with SIEM systems.
• Strong understanding of operating systems (Windows, Linux, etc.).
• Familiarity with network protocols and architectures.
• Excellent communication and interpersonal skills.
• Strong analytical and problem‑solving skills.
• Ability to obtain and retain a security clearance.
• U.S. Citizen.

• Degree in Computer Science, Information Assurance, or a related field.
• Certifications:
  
  CompTIA Security+, CISSP, or CISM.
• Experience with Department of War classified systems (e.g., SIPRNet).
• Experience with NIST Cybersecurity Framework and other security frameworks.
• Proficiency in Python, Power Shell, or other scripting languages.

Full‑time salary range:…