Information Systems Security Officer

SUMMARY General Description: The Information Systems Security Officer (ISSO) is responsible for ensuring the security and compliance of information and operational systems utilized by the Virginia Commercial Space Flight Authority (VA Space) The ISSO role supports the implementation, monitoring and enforcement of security controls to protect data, systems and networks from cyber threats while ensuring adherence to regulatory and organization requirements.

Responsibilities

Implement and maintain security controls in accordance with organizational policies and frameworks (e.g., NIST, CMMC 2.0) Conduct system security assessments, vulnerability scans, and risk analyses. Support the Authorization to Operate (ATO) process, including documentation and continuous monitoring. Monitor security systems and respond to incidents, ensuring timely mitigation and reporting.

Review system configurations, patches, and updates for compliance with security standards. Collaborate with IT, engineering, and compliance teams to integrate security into system lifecycles. Maintain system security documentation, including System Security Plans (SSPs), POA&Ms, and risk assessments. Provide security awareness guidance and training to system users and stakeholders.

Assist with audits and inspections by internal and external entities. Track and report on security posture and metrics to leadership. Other duties as assigned. EMPLOYMENT STANDARDS General Education: College: Bachelor’s Degree Major: Information Security, Computer Science, Information Technology or related field (or equivalent experience) Job-Related Experience: 3–7+ years of experience in information security or related IT roles 5+ years of experience with Microsoft Active Directory and Azure cloud security Working knowledge of security frameworks such as NIST RMF, FISMA, or ISO standards Experience with vulnerability management tools and security monitoring systems.

Strong understanding of network, system and application security principles Knowledge of SIEM tools and incident response processes Have a current / able to obtain and maintain a security clearance Experience supporting federal or regulated environments Certifications: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Security+ certification or equivalent required, Project or Agile certifications preferred Licenses, etc.

: Valid driver's license is necessary when operating a vehicle while on agency business. CONDITIONS OF EMPLOYMENT Knowledge: Knowledge of technology systems focusing on configuration, access control, monitoring, troubleshooting, and user training. Skills: Effective verbal and written communication skills Strong analytical and problem-solving skills Organization and attention to detail Proficient with Microsoft Office or related programs.

Abilities: Time management with a proven ability to meet deadlines. Demonstrates high professionalism in dealing with confidential and sensitive issues. Physical Demands: Work is light requiring lifting of computer equipment and involves typical office behaviors. Some travel is required to other counties. Work Environment: Work is performed in a typical office setting.

This position is not eligible for telework. Must be able to obtain and maintain eligibility for issuance of a NASA credential. Must be able to pass a pre-employment background check and drug test. This position is term limited 3-5 years, dependent on continued funding.