Senior Information Systems Security Officer

Ksat•Denver, CO

3d•Hybrid

About The Position

KSAT USA is seeking an experienced Information Systems Security Officer (ISSO) to serve as the primary cybersecurity and compliance lead for U.S.-based information systems supporting government and commercial space operations. This position will be responsible for the security posture, regulatory compliance, risk management activities, and cybersecurity operations oversight of KSAT's segregated U.S. environments, including cloud-hosted and on-premises systems handling Controlled Unclassified Information (CUI) and other sensitive data. The ISSO will serve as the principal U.S. point of contact for cybersecurity matters and will work closely with KSAT's Chief Information Security Officer (CISO) located in Norway to ensure alignment between corporate security policies and U.S. Government cybersecurity requirements. This role will lead implementation and verification of NIST 800-53 security controls, support Authority to Operate (ATO) activities, coordinate audits and assessments, manage system compliance documentation, and guide cybersecurity activities across engineering, operations, and business functions. The successful candidate will possess extensive experience in cybersecurity governance, risk management, compliance, security operations, cloud security, and system accreditation processes. Experience supporting aerospace, satellite communications, or government mission systems is highly desirable. This position will report to the US Director of Engineering, in close coordination with the CISO. The role will be local to the Denver region with flexible teleworking opportunities. Relocation assistance is available for the right candidate.

Requirements

US Citizenship; Eligibility to maintain a US DoD SECRET Clearance
Minimum 10 years of experience in cybersecurity, information assurance, information systems security, or related technical disciplines.
Minimum 5 years supporting regulated U.S. Government systems or environments subject to cybersecurity compliance requirements.
Demonstrated experience implementing and assessing NIST SP 800-53 security controls.
Experience supporting Authority to Operate (ATO), RMF, or comparable accreditation processes.
Experience developing and maintaining cybersecurity documentation including: System Security Plans (SSPs), POA&Ms, Security Policies and Procedures, Risk Assessments, Continuous Monitoring Documentation
Experience supporting environments containing Controlled Unclassified Information (CUI).
Strong understanding of: NIST Risk Management Framework (RMF), NIST 800-53, NIST 800-171, CMMC, Incident Response, Vulnerability Management, Continuous Monitoring
Experience working with both cloud-hosted and on-premises systems.
Strong understanding of enterprise networking principles, network segmentation, access control, and secure system design.
Experience collaborating with engineering teams to implement and validate cybersecurity requirements.
Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, Engineering, or related technical discipline. Equivalent combinations of professional experience, cybersecurity certifications, and demonstrated expertise may be considered in lieu of a formal degree.

Nice To Haves

Experience supporting DoD, NASA, NOAA, Intelligence Community, or other U.S. Government programs.
Experience with: Azure Government, Microsoft Azure, AWS GovCloud, OpenStack-based environments, Kubernetes platforms
Experience supporting environments operating under FedRAMP, RMF, or equivalent government compliance frameworks.
Familiarity with Security Information and Event Management (SIEM) platforms, vulnerability scanners, endpoint protection platforms, and cloud security tooling.
Experience reviewing network and cloud architectures from a cybersecurity perspective.
Understanding of secure software development lifecycle (SSDLC) principles and DevSecOps practices.

Responsibilities

Serve as the designated Information Systems Security Officer (ISSO) for KSAT's U.S.-based information systems and regulated environments.
Lead implementation, assessment, and continuous monitoring of NIST 800-53 security controls.
Maintain the cybersecurity posture of systems supporting government, defense, and commercial space customers.
Develop, maintain, and continuously improve system security policies, procedures, standards, and operational guidance.
Act as the primary interface for cybersecurity audits, assessments, inspections, and customer security reviews.
Support development and maintenance of System Security Plans (SSPs), POA&Ms, security assessments, policies, and other compliance documentation.
Lead cybersecurity activities associated with system authorization and Authority to Operate (ATO) processes.
Track and manage cybersecurity risks, vulnerabilities, findings, and remediation efforts.
Coordinate cybersecurity monitoring activities across cloud and on-premises environments.
Review security events, alerts, vulnerabilities, and threat intelligence reporting to identify potential impacts to KSAT systems.
Collaborate with software, cloud, and network engineering teams to implement secure architectures and operational processes.
Serve as the primary cybersecurity advisor to KSAT USA leadership.
Coordinate cybersecurity activities with the Norway-based CISO and international security teams.