·Ensure compliance with cyber security requirements in accordance with DoD and DoD Component cybersecurity and information assurance policies and guidance
·Support the System Owner in development of a POA&M and budget that addresses the implementation of cyber security requirements throughout the lifecycle of the system
·Support implementation of Risk Management Framework (RMF)
·Maintain and report systems assessment and authorization status and issues in accordance with DoD component guidance
·Coordinate with the organization’s security manager to ensure issues affecting the organization's overall security are addressed appropriately
·Continuously monitor the system or information environment for security-relevant events and configuration changes that negatively affect security posture
·Periodically assesses the quality of security controls implementation against performance indicators
·Immediately report any significant change in the security posture of the system, and recommended mitigations, to the ISSM
·Ensure that SSE processes are aligned to, and adequately documented in the program's SEP and PPP, and are executed with sufficient rigor to ensure required security controls are implemented, resulting in the lowest level of residual risk to system operation
·Maintain situational awareness and initiate actions to improve or restore IA posture as well as conducting annual security reviews of all IA controls and a test of selected IA controls
·Assist in training other ISSOs within the team to grow their skillsets in the various aspects of Risk Management Framework and Accreditation/Authorization to include, but not limited to eMASS, SPLUNK, PO&AM generation, etc.
