ISSO

Koniag Government Services, LLC•Fort Belvoir, VA

6d•$125,000 - $155,000•Remote

About The Position

Kadiak, LLC, a Koniag Government Services company, is seeking an experienced Information System Security Officer (ISSO) to support Kadiak and our government customer. This position is Remote.

Requirements

Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field. (Equivalent work experience will be considered in lieu of a degree).
Certified Information Systems Security Professional (CISSP)
3-5 years of experience in information security, with at least 2 years in an ISSM/ISSO role.
Proven experience in managing security compliance and implementing security programs in a large organization.
In-depth knowledge of security frameworks such as NIST 800-53, RMF, FISMA, and others.
Strong knowledge of information security technologies and practices, including encryption, firewalls, intrusion detection systems, and endpoint protection.
Familiarity with common security tools (e.g., SIEM, vulnerability scanners).
Excellent analytical and problem-solving skills, with the ability to assess complex security risks.
Ability to communicate effectively, both verbally and in writing, to technical and non-technical stakeholders.
Strong organizational and time management skills.
C5ISR Training Requirements (Required for the Contract but can be obtained after start date).
ACAS Required Training: 5.14 or higher
Older training certificates must be accompanied by Best Practice Guide Knowledge Exam report
ESS Required Trainings: DISA ESS 201
DISA ESS 301

Nice To Haves

Additional certifications in risk management, security architecture, or cloud security (e.g., AWS Certified Security Specialty) are a plus.
Experience with security certifications for cloud environments (e.g., AWS, Azure).
Knowledge of advanced persistent threats (APTs) and threat intelligence.
Familiarity with security management software and automation tools.

Responsibilities

Develop, implement, and manage the organization’s security policies, procedures, and systems to safeguard information.
Ensure compliance with relevant regulatory requirements (e.g., NIST, FISMA, RMF) and best practices for information security.
Perform security assessments, vulnerability analysis, and risk management processes to identify and address security gaps.
Manage security authorization and accreditation of information systems, ensuring they meet all required security controls.
Assess risks related to information systems and provide recommendations to mitigate identified risks.
Maintain and update System Security Plans (SSPs), ensuring they are in line with current operational and security requirements.
Prepare and review security documentation, including policies, procedures, and training materials for staff.
Act as a liaison between the organization and external auditors, regulatory bodies, and stakeholders on matters related to security compliance.
Coordinate responses to security incidents, including identifying, investigating, and resolving potential threats to systems and data.
Lead the development and implementation of incident response plans and disaster recovery procedures.
Implement and maintain security monitoring tools and practices to detect and respond to security events.
Continuously evaluate emerging threats and recommend improvements to the organization's security posture.
Provide training and guidance on security best practices to staff and users across the organization.
Promote a culture of security awareness and ensure that employees follow all security protocol.
Perform other duties as assigned by leadership team.