Information System Security Officer
AOCE, Inc.
About This Role
Who We Are:
CAE Vision: Our vision is to be the worldwide partner of choice in defense
and security, civil aviation, and healthcare by revolutionizing our
customers training and critical operations with digitally immersive
solutions to elevate safety, efficiency and readiness.
CAE Defense & Security Mission: CAEs Defense and Security business unit
focuses on helping prepare military customers to develop and maintain the
highest levels of mission readiness.
CAE Values: Empowerment, Innovation, Excellence, Integrity and OneCAE
make us who we are and we strive to make a difference in the world while
helping each other succeed.
What We Have to Offer:
Comprehensive and competitive benefits package and flexibility that promotes
work-life balance
A work environment where all employees are valued, respected and safe
Freedom to succeed by enabling team members to deliver, take initiatives and
make decisions
Recognition, professional development, advancement and having fun!
Summary
The ISSO will provide Cybersecurity subject matter expertise with government
security procedures and policies and ensure compliance and quality control
across multiple architectures and government systems.
Essential Duties and Responsibilities
Reasonable accommodations may be made to enable individuals with disabilities
to perform the essential functions.
Provide support to certification and accreditation implementing the Risk
Management Framework (RMF) across multiple classification domains and
update status in the Enterprise Mission Assurance Support Service (eMASS)
syste
Create, update and maintain artifacts for systems accreditation within
Enterprise Mission Assurance Support Service (eMASS)
Work with system/network administrators to conduct vulnerability scanning
using latest DoD security tools (Nessus Security Center)
Perform host-based security monitoring utilizing McAfee Enterprise Policy
Orchestra (McAfee ePO)
Document cybersecurity tactics, techniques and procedures; maintaining
document repository
Collaborate with network administrators to develop and maintain DISA compliant
Ports Protocols Services Management (PPSM) data for all systems assigned.
Collaborate with configurations management to develop and maintain authorized
hardware/software lists for all systems assigned.
Work as an integrated team member in a highly dynamic, operationally
sensitive environment providing mission critical data to the war fighter.
Communicate and coordinate across the Cybersecurity team for cyber-related
issues.
Analyze security risks, threats and vulnerabilities from multiple sources
and recommend strategies to leadership to prevent security exposures and
detect intruders.
Create plans to implement solutions and follow them through to completion
keeping all stakeholders informed.
Review, maintain and report compliancy of Cybersecurity Task/Operational
Orders with appropriate governing entities.
Stay current with Government and industry trends, laws and standards and
recommend methods to meet requirements.
Analyze and define information security requirements for current and future
internal and external data connections and maintain documentation for those
connections in a central repository.
Coordinate with external cybersecurity teams for vulnerability testing of the
MMC cybersecurity posture
Perform and document Account Access Authorization and Control for all
information systems assigned
Qualifications and Education Requirements
Certifications: CompTIA Security
TS/SCI Clearance required. Ability to perform multiple projects with dynamic
tasking and follow-through from beginning to end on assigned tasks.
Ability to work as an integrated member of a dynamic and mission focused team
to promote a cooperative working environment and a positive team atmosphere.
Working knowledge of cyber doctrine and DoD/Industry Cybersecurity best
practices.
Working knowledge of network pro ocols and MS Windows defense and threat
mitigation.
The ability to think analytically and approach issues logically and
systematically.
Excellent spoken and written communications skills.
Preferred Qualifications
Education: AAS/BA/BS
Certifications: CISSP, CISM, CASP, C|EH, CHFI
Desired experience with eMASS, Trellix (previously McAfee) ePolicy
Orchestrator, Assured Compliance Assessment Solution (ACAS), and
Security Content Automation Program (SCAP)/Security Technical
Implementation Guide (STIG), Amazon Web Services
Security Responsibilities
Must complywith all company security and data protection / usage policies
and procedures. Personally responsible for proper marking and handling of all
information and materials, in any form. Shall not divulge any information,
or afford access, to other employees not having a need-to-know. Shall not
divulge information outside company without management approval. All
government and proprietary information will be accessed and stored
electronically on company provided resources.
Incumbent must be eligible for DoD Personal Security Clearance.
Due to U.S. Government contract requirements, only U.S. citizens are
eligible for this role.
Work Environment
This job operates in a professional office environment. This role routinely
uses standard office equipment such as computers, phones, photocopiers,
filing cabinets and fax machines. Travel is occasional (1-2 times per year).