Information Systems Security Officer

About the role

Moog is seeking an Information Systems Security Officer (ISSO) to support the Information Security Manager in operating, accrediting, maintaining and auditing information systems that process classified data. The position is based onsite at the Buffalo, NY headquarters and works within a performance‑driven culture.

Key responsibilities

• Prepare, update and maintain Risk Management Framework (RMF) documentation, including ATO packages, System Security Plans, Risk Assessment Reports and POA&Ms for classified networks.
• Perform regular auditing, continuous monitoring and security control verification of bootable information systems in accordance with RMF/ATO.
• Maintain a complete inventory of information systems, software and peripheral hardware.
• Assist Data Transfer Agents and the Facility Security Officer with removable‑media file transfers following the Assured File Transfer policy.
• Coordinate with internal teams to ensure compliance with security policies and standards.

Required profile

• Bachelor’s degree in IT, Computer Information Systems or related field (or an associate degree plus four years experience).
• Minimum five years of experience in Information Assurance.
• Current or ability to obtain a Secret/Top Secret U.S. security clearance.
• Familiarity with DAAPM, NISPOM, JSIG, ICD 503, RMF and NIST Special Publications.

Required skills

• Vulnerability scanning and auditing tools (e.g., Nessus, SCAP Compliance Checker).
• Security Information and Event Management (SIEM) and Data Loss Prevention (DLP) solutions.
• System hardening tools such as STIGs, Windows Group Policy Objects and PowerShell scripting.
• USB device control and secure data‑transfer procedures.