Kadiak, LLC, a Koniag Government Services company, is seeking an experienced Information System Security Officer (ISSO) to support Kadiak and our government customer. This position is Remote.
We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.
The ISSO will be responsible for:
- Information Security Management:
- Develop, implement, and manage the organization's security policies, procedures, and systems to safeguard information.
- Ensure compliance with relevant regulatory requirements (e.g., NIST, FISMA, RMF) and best practices for information security.
- Perform security assessments, vulnerability analysis, and risk management processes to identify and address security gaps.
- Manage security authorization and accreditation of information systems, ensuring they meet all required security controls.
- Risk Management & Compliance:
- Assess risks related to information systems and provide recommendations to mitigate identified risks.
- Maintain and update System Security Plans (SSPs), ensuring they are in line with current operational and security requirements.
- Prepare and review security documentation, including policies, procedures, and training materials for staff.
- Act as a liaison between the organization and external auditors, regulatory bodies, and stakeholders on matters related to security compliance.
- Incident Management:
- Coordinate responses to security incidents, including identifying, investigating, and resolving potential threats to systems and data.
- Lead the development and implementation of incident response plans and disaster recovery procedures.
- Security Monitoring & Continuous Improvement:
- Implement and maintain security monitoring tools and practices to detect and respond to security events.
- Continuously evaluate emerging threats and recommend improvements to the organization's security posture.
- Training & Awareness:
- Provide training and guidance on security best practices to staff and users across the organization.
- Promote a culture of security awareness and ensure that employees follow all security protocol
- Education:
- Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field. (Equivalent work experience will be considered in lieu of a degree).
- Certifications:
- Certified Information Systems Security Professional (CISSP)
- Experience:
- 3-5 years of experience in information security, with at least 2 years in an ISSM/ISSO role.
- Proven experience in managing security compliance and implementing security programs in a large organization.
- In-depth knowledge of security frameworks such as NIST 800-53, RMF, FISMA, and others.
- Skills & Abilities:
- Strong knowledge of information security technologies and practices, including encryption, firewalls, intrusion detection systems, and endpoint protection.
- Familiarity with common security tools (e.g., SIEM, vulnerability scanners).
- Excellent analytical and problem-solving skills, with the ability to assess complex security risks.
- Ability to communicate effectively, both verbally and in writing, to technical and non-technical stakeholders.
- Strong organizational and time management skills.
- C5ISR Training Requirements (Required for the Contract but can be obtained after start date).
PRIVILEGED (ADMIN) ACCESS: • ACAS Required Training:
o 5.14 or higher
o Older training certificates must be accompanied by Best Practice Guide Knowledge Exam report
• ESS Required Trainings:
o DISA ESS 201
o DISA ESS 301
- Good to Have - But Not Required:
- Additional certifications in risk management, security architecture, or cloud security (e.g., AWS Certified Security Specialty) are a plus.
- Experience with security certifications for cloud environments (e.g., AWS, Azure).
- Knowledge of advanced persistent threats (APTs) and threat intelligence.
- Familiarity with security management software and automation tools.
- Other responsibilities:
- Perform other duties as assigned by leadership team
