cybersecurity officer

<div>ECS is seeking an Information Systems Security Officer to work in our Fairfax, VA office.
ECS is seeking a detail-oriented Information System Security Officer (ISSO) to support cybersecurity operations for U.S. Navy information systems. The ISSO will work under the direction of the ISSM and program leadership to ensure systems meet DoD and Department of the Navy (DON) cybersecurity requirements under the Risk Management Framework (RMF).

The ideal candidate will have experience supporting Navy systems and maintaining RMF packages in eMASS, with familiarity across Navy environments such as NAVWAR, NAVAIR, NAVSEA, or Fleet Cyber Command.

<ul><li>Support the implementation and maintenance of RMF in accordance with:
<ul><li>DoDI 8510.01 (Risk Management Framework)</li>
<li>DoDI 8500.01 (Cybersecurity)</li>
</ul></li><li>Assist in developing, updating, and maintaining RMF documentation, including:
<ul><li>System Security Plans (SSPs)</li>
<li>Security Control Traceability Matrices (SCTMs)</li>
<li>Plan of Action &amp; Milestones (POA&amp;Ms)</li>
<li>Continuous Monitoring artifacts</li>
</ul></li><li>Implement and validate security controls based on:
<ul><li>NIST SP 800-53 Rev. 5</li>
<li>NIST SP 800-37 Rev. 2</li>
</ul></li><li>Maintain and update system records in eMASS, ensuring accuracy and completeness</li>
<li>Conduct routine security control checks and support formal Security Control Assessments (SCAs)</li>
<li>Perform vulnerability management activities, including:
<ul><li>Running and analyzing ACAS scans</li>
<li>Applying and validating DISA STIGs/SRGs</li>
<li>Tracking remediation actions to closure</li>
</ul></li><li>Monitor system security posture and support continuous monitoring (CONMON) activities</li>
<li>Support incident response efforts in accordance with:
<ul><li>DoDI 8530.01 (Cyber Incident Response)</li>
<li>Navy Cyber Defense Operations processes</li>
</ul></li><li>Assist with audits, inspections, and cybersecurity reviews (e.g., FISMA, DON CIO inspections)</li>
<li>Provide day-to-day cybersecurity support to system administrators, engineers, and developers</li>
<li>Ensure proper configuration management and secure baseline enforcement across systems</li>
</ul>Requirements:
<ul><li>Active Secret clearance (TS/SCI preferred)</li>
<li>Bachelor's degree in Cybersecurity, Information Technology, or related field (or equivalent experience)</li>
<li>5&ndash;7+ years of cybersecurity experience, with ISSO or ISSO-support experience in a DoD/Navy environment</li>
<li>Hands-on experience with RMF processes and artifacts</li>
<li>Experience working in eMASS</li>
<li>Working knowledge of:
<ul><li>NIST SP 800-53 Rev. 5 controls</li>
<li>NIST SP 800-37 Rev. 2 (RMF)</li>
<li>DoDI 8500.01 / 8510.01</li>
<li>SECNAV M-5239.1 (DON Cybersecurity Manual)</li>
</ul></li><li>Experience supporting Navy or DoD systems (e.g., NAVWAR, NAVAIR, NAVSEA, USMC)</li>
<li>Familiarity with:
<ul><li>DISA STIGs and compliance tools</li>
<li>ACAS vulnerability scanning</li>
<li>Endpoint security tools (e.g., HBSS/ESS)</li>
</ul></li><li>Must meet DoD 8140 (formerly 8570.01-M) IAT Level II or higher requirements, such as:
<ul><li>Security+ (minimum)</li>
<li>CySA+</li>
<li>SSCP</li>
<li>CASP+ (preferred)</li>
</ul>
</li></ul> 
Req Benefits:
<div>https://ecstech.com/careers/benefits/&quot;&gt;https://ecstech.com/careers/benefits/</div></div>

Information Systems Security Officer

Oman Housing Bank | بنك الإسكان العُماني

<div>
 
 
 Job Purpose:
 
 
 
 The Officer &ndash; Information Security supports the monitoring, analysis, and protection of the Bank&rsquo;s information systems and data against cybersecurity threats.
 
 
 He/ She assists in security operations, incident response, and implementation of security controls to ensure compliance with internal policies and regulatory requirements.
 
 
 The Officer &ndash; Information Security contributes to strengthening the Bank&rsquo;s cybersecurity posture through continuous monitoring, awareness, and adherence to best practices.
 
 
 
 
 
 
 Key Accountabilities:
 
 
 <ul>
 <li>
 Monitors and analyzes security events across networks, applications, and systems to detect potential threats under the supervision of the line manager.
 </li>
 <li>
 Supports incident response activities, including investigation, documentation, escalation, and remediation.
 </li>
 <li>
 Assists in conducting vulnerability assessments and supports implementation of security controls and remediation actions.
 </li>
 <li>
 Collaborates cross functionally with Technology, Risk Management, and Compliance teams to ensure adherence to cybersecurity policies and regulatory requirements.
 </li>
 <li>
 Supports monitoring of security tools, alerts, and dashboards to ensure timely detection and response.
 </li>
 <li>
 Maintains accurate records of incidents, findings, and security activities for reporting and audit purposes.
 </li>
 <li>
 Participates in cybersecurity awareness initiatives and supports promotion of security best practices across the Bank.
 </li>
 <li>
 Stays abreast on emerging threats, vulnerabilities, and cybersecurity trends and applies relevant learnings.
 </li>
 <li>
 Supports implementation of security standards, procedures, and guidelines across systems and operations.
 </li>
 <li>
 Assists in preparing basic security reports and metrics for internal stakeholders.
 </li>
 </ul>
 
 
 
 
 
 
 
 
 Qualifications and Experience:
 
 
 <ul>
 <li>
 Bachelor's Degree in Cyber or Information Security.
 </li>
 <li>
 Fresh graduate with 0 years of experience, registered as unemployed and have no registered work history.
 </li>
 <li>
 Basic training/ internship exposure to banking or financial services environments is desired.
 </li>
 <li>
 Professional certification in cybersecurity (e.g., CompTIA Security+, Certified SOC Analyst, etc.) is desired.
 </li>
 <li>
 Strong understanding of networking fundamentals, operating systems, and information security principles.
 </li>
 </ul>
 
 
 
 
 
 ** Candidates meeting the criteria will be contacted.
 
 
 
 
 ** Candidates residing in Muscat will be given first priority.
 
 
 
 
 ** Applications will be accepted until 22-April-2026 at 2:00 P.M. Submissions received after this date and time will not be considered **
 
 
</div>

Officer - Information Security

Mobilink Bank

<div>
 
 
 Department:
 
 Information Security
 
 
 
 Reports To:
 
 Chief Information Security Officer
 
 
 
 Grade:
 
 VP
 
 
 
 No of Position:
 
 01
 
 
 
 Location:
 
 Head Office (Islamabad)
 
 
 
 
 
 
 What is Data Protection Officer - MMBL?
 
 
 
 
 
 
 Mobilink Microfinance Bank Limited seeks a visionary and technically proficient Data Protection Officer (DPO) to lead the bank&rsquo;s enterprise-wide data protection and privacy program. Reporting directly to the Chief Information Security, the DPO will be responsible for establishing the governance, architecture, and operational execution of the Bank&rsquo;s privacy and data protection obligations.
 
 
 
 
 
 
 What Data Protection Officer Does - MMBL?
 
 
 
 
 
 
 1.
 
 Strategic Privacy Program Design &amp; Leadership
 
 
 
 
 
 <ul>
 <li>
 Develop, own, and drive the enterprise privacy and data protection strategy in alignment with SBP regulatory expectations and international best practices.
 </li>
 <li>
 Establish and operationalize a centralized Data Protection Office: define its charter, structure, roles, and reporting lines.
 </li>
 <li>
 Define a bank-wide data protection operating model integrating privacy requirements into enterprise risk management and governance frameworks.
 </li>
 <li>
 Champion data ethics, responsible data handling, and privacy-by-default principles across the organization.
 </li>
 </ul>
 
 
 
 
 2.
 
 Regulatory Compliance &amp; Privacy Risk Management
 
 
 
 
 
 
 Ensure continuous compliance with:
 
 <ul>
 <li>
 SBP&rsquo;s Framework on IT Governance and Risk Management
 </li>
 <li>
 SBP&rsquo;s Cybersecurity Framework
 </li>
 <li>
 Pakistan&rsquo;s Personal Data Protection Bill
 </li>
 <li>
 ISO/IEC 27001, PCI DSS, and GDPR (where applicable)
 </li>
 <li>
 Act as the bank&rsquo;s focal point or secondary liaison with SBP and other regulatory bodies through Compliance and Legal departments.
 </li>
 <li>
 Lead Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for new systems, products, and processes.
 </li>
 <li>
 Monitor local and global data privacy regulations and proactively adjust compliance strategies.
 </li>
 </ul>
 
 
 
 
 3.
 
 Data Governance &amp; Inventorization
 
 
 
 
 
 <ul>
 <li>
 Lead implementation of data classification, tagging, and ownership models across data types and systems.
 </li>
 <li>
 Oversee and maintain accurate Records of Processing Activities (RoPAs) per SBP and global privacy standards.
 </li>
 <li>
 Ensure enforcement of policies for data minimization, retention, disposal, and lifecycle management.
 </li>
 </ul>
 
 
 
 
 4.
 
 Technology &amp; Data Loss Prevention (DLP) Oversight
 
 
 
 
 
 <ul>
 <li>
 Collaborate with IT, SOC, and Information Security teams to ensure privacy-by-design and privacy-by-default in systems architecture.
 </li>
 <li>
 Oversee deployment, configuration, and monitoring of DLP solutions across endpoints, email, file storage, and networks.
 </li>
 <li>
 Ensure technical controls align with SBP&rsquo;s cybersecurity baseline controls.
 </li>
 </ul>
 
 
 
 
 5.
 
 Vendor, Third-Party &amp; Contractual Privacy Assurance
 
 
 
 
 
 <ul>
 <li>
 Evaluate third-party vendors, partners, and outsourcing arrangements for privacy and data protection risks.
 </li>
 <li>
 Ensure Data Processing Agreements (DPAs), SLAs, and contractual clauses meet regulatory and internal privacy requirements.
 </li>
 <li>
 Conduct vendor risk assessments and embed privacy obligations in procurement and onboarding processes.
 </li>
 </ul>
 
 
 
 
 6.
 
 Privacy Incident Management &amp; Breach Handling
 
 
 
 
 
 <ul>
 <li>
 Develop, maintain, and test the Privacy Incident Response Plan aligned with SBP incident handling guidelines.
 </li>
 <li>
 Maintain a personal data breach register and ensure timely notification to SBP and affected stakeholders for qualifying breaches.
 </li>
 <li>
 Coordinate breach response and containment with SOC, IT, and Legal teams.
 </li>
 </ul>
 
 
 
 
 7.
 
 Awareness, Training &amp; Culture Building
 
 
 
 
 
 <ul>
 <li>
 Develop and roll out privacy awareness programs, including mandatory and role-specific training modules.
 </li>
 <li>
 Promote a culture of privacy through KPIs, employee engagement campaigns, and executive support.
 </li>
 <li>
 Regularly assess training effectiveness and incorporate feedback from business units.
 </li>
 </ul>
 
 
 
 
 8.
 
 Reporting &amp; Stakeholder Communication
 
 
 
 
 
 <ul>
 <li>
 Provide periodic updates to senior management and the Board on data protection program maturity and effectiveness.
 </li>
 <li>
 Contribute to internal audits and regulatory examinations, ensuring evidence of compliance is maintained and auditable.
 </li>
 <li>
 Generate dashboards and metrics on privacy risks, incident trends, and regulatory compliance status.
 </li>
 </ul>
 
 
 
 
 
 What are we looking for and what does it take to be Data Protection Officer - MMBL?
 
 
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s or Master&rsquo;s degree in Information Security, Cybersecurity, Law, Risk Management, or a related field.
 </li>
 <li>
 Professional Certifications (preferred): CDPO, CIPM, CIPP/E, CISA, CISSP, CRISC, ISO/IEC 27001 Lead Implementer.
 </li>
 <li>
 Knowledge of PCI DSS and other relevant data security frameworks and standards.
 </li>
 </ul>
 
 
 
 
 
 About MMBL:
 
 
 
 
 
 
 Mobilink Microfinance Bank Ltd. is providing banking services to over 48 million registered users including 20+ million monthly active customers across Pakistan. With a hybrid model that combines traditional microfinance with mobile/digital banking technologies, the bank now operates with over 114 branches and 270,000 branchless banking agents and provides a USSD (GSM) based digital channel offering savings, micro enterprise (MSME) loans, small housing loans, remittances, collection (utility bills and loan instalments), mobile wallets, insurance, G2P, B2B &amp; B2P payments; thus, playing a leading role in the promotion of financial inclusion. MMBL is committed to fostering a positive and productive workplace, and our core values reflect this focus. These values include promoting innovation and entrepreneurship, encouraging teamwork and collaboration, and prioritizing a customer-centric approach in all aspects of our business.
 
 
 
 
 
 
 Why Join MMBL?
 
 
 
 
 
 
 This is an opportunity for someone who is passionate about making a difference and playing a key role in driving transformative change. Our team is committed to empowering millions with the tools necessary to succeed in the digital age, and we're looking for a talented individual to join us in this endeavor.
 
 
 
</div>

Data Protection Officer

cFocus Software Incorporated

<div>cFocus Software is seeking a highly skilled Mid-Level Information Systems Security Officer (ISSO) to support the Enterprise Security Services (ESS) program. This role is responsible for ensuring compliance with federal cybersecurity requirements, maintaining security documentation, and supporting system authorization and continuous monitoring activities. The successful candidate will oversee security control assessments, provide risk management guidance, and collaborate with stakeholders to maintain secure system configurations in alignment with the ESS Performance Work Statement (PWS).<h2 class="jobSectionHeader">
Responsibilities</h2><h3 class="jobSectionHeader">
Security Governance</h3><ul><li>
Oversee the implementation and enforcement of system security requirements as defined by the PWS.</li><li>
Ensure compliance with federal cybersecurity policies, including NIST RMF, FISMA, and FedRAMP.</li><li>
Support and maintain system security plans (SSPs), risk assessments, and authorization documentation.</li><li>
Collaborate with system owners, administrators, and engineers to maintain secure system configurations.</li></ul><h3 class="jobSectionHeader">
Risk &amp; Compliance Management</h3><ul><li>
Lead security control assessments and support continuous monitoring activities.</li><li>
Conduct vulnerability assessments, risk analyses, and recommend remediation strategies.</li><li>
Support audits, inspections, and authorization processes (ATO/ATC).</li><li>
Develop, maintain, and track Plans of Action and Milestones (POA&amp;Ms).</li></ul><h3 class="jobSectionHeader">
Documentation &amp; Reporting</h3><ul><li>
Develop and deliver security documentation, reports, and briefings to leadership and stakeholders.</li><li>
Ensure timely and accurate reporting of cybersecurity posture, risks, and incidents.</li><li>
Maintain accurate and up-to-date security artifacts to support compliance and accreditation efforts.</li></ul><h3 class="jobSectionHeader">
Mentorship &amp; Collaboration</h3><ul><li>
Mentor and provide guidance to junior ISSOs and cybersecurity staff.</li><li>
Collaborate with internal and external stakeholders to resolve security concerns and support mission objectives.</li></ul><h2 class="jobSectionHeader">
Required Experience</h2><ul><li>
6+ years of cybersecurity experience, with at least 3+ years as an ISSO in a federal environment.</li><li>
Strong knowledge of NIST SP 800-53, Risk Management Framework (RMF), and federal cybersecurity policies.</li><li>
Experience developing and maintaining security documentation (SSPs, SARs, POA&amp;Ms, etc.).</li><li>
Proficiency in vulnerability management, incident response, and continuous monitoring practices.</li><li>
Demonstrated ability to brief senior leadership and communicate effectively across technical and non-technical stakeholders.</li></ul><h2 class="jobSectionHeader">
Education &amp; Certifications</h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or related field.</li><li>
Relevant cybersecurity certifications (e.g., CISSP, CISM, CISA, CAP, or equivalent).</li><li>
Master&rsquo;s degree preferred.</li></ul><h2 class="jobSectionHeader">
Clearance Requirement</h2><ul><li>
Active Public Trust clearance required.</li></ul>
PuMXM01Rtk</div>

Mid-Level ISSO - HHS ESS

Koniag Government Services

Arlluk Technology Solutions, LLC a Koniag Government Services company, is seeking an Information Systems Security Officer with a Secret security clearance to support ATS and our government customer. This position is remote and part-time.
 
Koniag Government Services is seeking a Part-Time Information Systems Security Officer (ISSO) to support and maintain the security posture of critical Department of War (DOW) information systems. The ideal candidate will be a detail-oriented professional with extensive expertise in the DOD Risk Management Framework (RMF), DISA regulations, and STIG compliance. Initially supporting one primary program, this role requires flexibility to potentially expand support to additional programs as requirements evolve. The successful candidate will manage vulnerabilities via ACAS and HBSS, maintain Authority to Operate (ATO) accreditations, and possess the strong organizational skills necessary to ensure continuous cybersecurity compliance in a mission-critical, team-based environment.
 
Essential Functions, Responsibilities & Duties may include, but are not limited to:
 The Information Systems Security Officer will be responsible for maintaining the security posture of multiple DOW information systems and ensuring compliance with all applicable cybersecurity frameworks and regulations. Principal responsibilities will include but are not limited to:
 <ul>
<li>Develop and maintain System Administration Documentation that maps interdependencies and critical paths for successful system refreshes, working closely with government stakeholders to identify agency interdependencies</li>
<li>Create and update Configuration and Architecture Diagrams in relation to critical paths and system interdependencies</li>
<li>Provide comprehensive RMF documentation to the ISSM in accordance with DOD accreditation processes</li>
<li>Verify compliance with STIG, DISA Chief Technology Office (CTO), and INFOCON guidelines and requirements</li>
<li>Validate security postures and update findings for assigned databases based on Assured Compliance Assessment Solution (ACAS) and Host Based Security System (HBSS) reports and logs</li>
<li>Adhere to CYBERCOM Information Assurance Vulnerability Alerts (IAVAs) by applying required patches and maintaining Plan of Action and Milestones (POA&M) documentation</li>
<li>Conduct STIG Checklist reviews and provide detailed reports of all findings in accordance with RMF frequency requirements</li>
<li>Generate monthly Cybersecurity Reports containing patch schedules for all servers, accreditation status, POA&M status, IAVA status, ACAS scan remediation status, and DISA CTO compliance status</li>
<li>Develop system and cybersecurity policies and plans to identify and respond to threats in compliance with DOW and DISA regulations</li>
<li>Audit access controls and permissions for CSS, COPS, and FABS systems in accordance with DOW and DISA compliance requirements</li>
<li>Provide incident response and recovery support as necessary</li>
<li>Support obtaining and maintaining Authority to Operate (ATO) accreditations for CSS and COPS/FABS systems</li>
<li>Maintain security posture for CSS, COPS/FABS, and EDMS systems</li>
<li>Support DISA ISSO/ISSM with security information to respond to taskers and emerging cybersecurity requirements</li>
<li>Support development and maintenance of Incident Response Plans (IRPs) and Continuity of Operations Plans (COOPs)</li>
<li>Interpret, plan for, prioritize, and implement actions necessary to maintain compliance with DOD and DISA cybersecurity requirements</li>
</ul>
Education and Experience: 
<ul>
<li>Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field from an accredited college or university</li>
<li>5+ years of experience as an ISSO supporting DOW information systems</li>
<li>Current DOD 8570.01-M IAT Level II or IAM Level II certification (CISSP, CISM, or CAP certification)</li>
<li>Experience working within the Risk Management Framework (RMF)</li>
</ul>
Clearance Requirement: 
<ul>
<li>Active Secret security clearance</li>
</ul>
Required Skills and Competencies: 
<ul>
<li>Comprehensive knowledge of DOD Risk Management Framework (RMF) and accreditation processes</li>
<li>Expertise in Security Technical Implementation Guides (STIGs) and STIG compliance verification</li>
<li>Proficiency with ACAS (Nessus) scanning tools and vulnerability management</li>
<li>Experience with Host Based Security System (HBSS) including ePO administration</li>
<li>Strong understanding of DISA CTO requirements and INFOCON procedures</li>
<li>Knowledge of CYBERCOM IAVAs and patch management processes</li>
<li>Ability to develop and maintain POA&Ms and track remediation efforts</li>
<li>Experience creating technical documentation including system architecture diagrams and security plans</li>
<li>Proficiency in conducting security assessments and audits</li>
<li>Knowledge of access control principles and implementation</li>
<li>Understanding of incident response procedures and recovery operations</li>
<li>Familiarity with ATO processes and requirements</li>
<li>Strong analytical and problem-solving abilities</li>
<li>Excellent written and verbal communication skills</li>
<li>Ability to work independently and as part of a team</li>
<li>Strong attention to detail and organizational skills</li>
<li>Ability to manage multiple priorities and meet strict deadlines</li>
</ul>
Our Equal Employment Opportunity Policy
 The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.
 The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at accommodations@koniag-gs.com or by calling 703-488-9377 to request accommodations.
 
Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.
 
Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352

Information Systems Security Officer (Part-time, Remote)

Arlluk Technology Solutions, LLC a Koniag Government Services company, is seeking an Information Systems Security Officer (ISSO) with a Secret security clearance to support ATS and our government customer. The position is remote.
 
We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.
 
Koniag Government Services is seeking an experienced Information Systems Security Officer (ISSO) to support and maintain the security posture of critical Department of War (DOW) information systems. The ideal candidate will be a detail-oriented professional with extensive expertise in the DOD Risk Management Framework (RMF), DISA regulations, and STIG compliance. This role involves working closely with government stakeholders to manage vulnerabilities via ACAS and HBSS, maintain Authority to Operate (ATO) accreditations, and develop comprehensive security documentation. The successful candidate will possess strong analytical skills and the ability to ensure continuous cybersecurity compliance within a fast-paced, mission-critical environment.
 
The Information Systems Security Officer will be responsible for maintaining the security posture of multiple DOW information systems and ensuring compliance with all applicable cybersecurity frameworks and regulations. Principal responsibilities will include but are not limited to:
 <ul>
<li>Develop and maintain System Administration Documentation that maps interdependencies and critical paths for successful system refreshes, working closely with government stakeholders to identify agency interdependencies</li>
<li>Create and update Configuration and Architecture Diagrams in relation to critical paths and system interdependencies</li>
<li>Provide comprehensive RMF documentation to the ISSM in accordance with DOD accreditation processes</li>
<li>Verify compliance with STIG, DISA Chief Technology Office (CTO), and INFOCON guidelines and requirements</li>
<li>Validate security postures and update findings for assigned databases based on Assured Compliance Assessment Solution (ACAS) and Host Based Security System (HBSS) reports and logs</li>
<li>Adhere to CYBERCOM Information Assurance Vulnerability Alerts (IAVAs) by applying required patches and maintaining Plan of Action and Milestones (POA&M) documentation</li>
<li>Conduct STIG Checklist reviews and provide detailed reports of all findings in accordance with RMF frequency requirements</li>
<li>Generate monthly Cybersecurity Reports containing patch schedules for all servers, accreditation status, POA&M status, IAVA status, ACAS scan remediation status, and DISA CTO compliance status</li>
<li>Develop system and cybersecurity policies and plans to identify and respond to threats in compliance with DOW and DISA regulations</li>
<li>Audit access controls and permissions for CSS, COPS, and FABS systems in accordance with DOW and DISA compliance requirements</li>
<li>Provide incident response and recovery support as necessary</li>
<li>Support obtaining and maintaining Authority to Operate (ATO) accreditations for CSS and COPS/FABS systems</li>
<li>Maintain security posture for CSS, COPS/FABS, and EDMS systems</li>
<li>Support DISA ISSO/ISSM with security information to respond to taskers and emerging cybersecurity requirements</li>
<li>Support development and maintenance of Incident Response Plans (IRPs) and Continuity of Operations Plans (COOPs)</li>
<li>Interpret, plan for, prioritize, and implement actions necessary to maintain compliance with DOD and DISA cybersecurity requirements</li>
</ul>
Education and Experience: 
<ul>
<li>Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field from an accredited college or university</li>
<li>5+ years of experience as an ISSO supporting DOW information systems</li>
<li>Current DOD 8570.01-M IAT Level II or IAM Level II certification (CISSP, CISM, or CAP certification)</li>
<li>Experience working within the Risk Management Framework (RMF)</li>
</ul>
Clearance Requirement: 
<ul>
<li>Active Secret security clearance</li>
</ul>
Required Skills and Competencies: 
<ul>
<li>Comprehensive knowledge of DOD Risk Management Framework (RMF) and accreditation processes</li>
<li>Expertise in Security Technical Implementation Guides (STIGs) and STIG compliance verification</li>
<li>Proficiency with ACAS (Nessus) scanning tools and vulnerability management</li>
<li>Experience with Host Based Security System (HBSS) including ePO administration</li>
<li>Strong understanding of DISA CTO requirements and INFOCON procedures</li>
<li>Knowledge of CYBERCOM IAVAs and patch management processes</li>
<li>Ability to develop and maintain POA&Ms and track remediation efforts</li>
<li>Experience creating technical documentation including system architecture diagrams and security plans</li>
<li>Proficiency in conducting security assessments and audits</li>
<li>Knowledge of access control principles and implementation</li>
<li>Understanding of incident response procedures and recovery operations</li>
<li>Familiarity with ATO processes and requirements</li>
<li>Strong analytical and problem-solving abilities</li>
<li>Excellent written and verbal communication skills</li>
<li>Ability to work independently and as part of a team</li>
<li>Strong attention to detail and organizational skills</li>
<li>Ability to manage multiple priorities and meet strict deadlines</li>
</ul>
Our Equal Employment Opportunity Policy
 The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.
 The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at accommodations@koniag-gs.com or by calling 703-488-9377 to request accommodations.
 
Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.
 
Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352

Information Systems Security Officer (REMOTE)

Koniag IT Systems, LLC a Koniag Government Services company, is seeking Information System Security Officer (ISSO) with a Top- Secret security clearance to support KITS and our government customer in Las Vegas, NV. Will also consider candidates in DC, MD and New Mexico.
 
We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.
 
Koniag Data Solutions is seeking an experienced Mid-Level Information System Security Officer (ISSO) to support our cybersecurity efforts for the Department of Energy's National Nuclear Security Administration (DOE NNSA). The ideal candidate will have demonstrated experience with security authorization processes, risk management, and compliance with federal cybersecurity requirements. This position requires a professional who can effectively manage system security documentation and processes while working within the Risk Management Framework (RMF). Candidates must be eligible for the appropriate security clearance.
 
Essential Functions, Responsibilities & Duties may include, but are not limited to:
 The Mid-Level ISSO will be responsible for managing system, application, and hardware authorization activities to ensure cybersecurity requirements are properly implemented. Principal responsibilities include:
 
Authorization Activities: 
<ul>
<li>Manage and develop system, application, and hardware authorization documentation including Information System Security Plans (ISSPs), Risk Assessments, and Security Baselines</li>
<li>Ensure authorization activities are completed in a timely and accurate manner for both initial authorization and re-authorization processes</li>
<li>Develop comprehensive authorization packages independently and submit them to the ISSM for review</li>
<li>Prepare authorization packages for submission to the Authorizing Official (AO) or Authorizing Official Designated Representative (AODR) for review and approval</li>
<li>Apply the Risk Management Framework (RMF) methodology consistently across assigned systems</li>
</ul>
Maintenance Activities: 
<ul>
<li>Maintain knowledge of AO-approved risk boundaries and risk tolerance levels</li>
<li>Update authorization documentation according to organizationally defined schedules in accordance with risk management objectives</li>
<li>Conduct continuous monitoring activities for assigned systems</li>
<li>Track security control implementation and effectiveness</li>
<li>Document system changes and assess their impact on security posture</li>
</ul>
General Support and Management: 
<ul>
<li>Work within established authorization boundaries and ensure operations adhere to approved parameters</li>
<li>Support transparent decision-making processes that align with AO requirements</li>
<li>Assist with the onboarding and termination processes for contractor personnel</li>
<li>Ensure work products and deliverables meet Enterprise Cybersecurity Program requirements and quality standards</li>
<li>Provide technical support at meetings, briefings, and presentations</li>
<li>Collaborate effectively with other contractors supporting NA-IM and NNSA</li>
<li>Mentor junior security personnel in authorization processes and documentation</li>
</ul>
Education and Experience:Required: 
<ul>
<li>Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field</li>
<li>3-5 years of experience in cybersecurity or information security</li>
<li>2+ years of experience with RMF or similar security authorization frameworks</li>
<li>Experience developing and maintaining security documentation including ISSPs, Risk Assessments, and Security Baselines</li>
<li>Experience working with federal agencies, preferably DOE, NNSA, or Department of Defense</li>
<li>Training that meets or is progressing toward NNSA and/or DoD 8140 requirements</li>
</ul>
Required Skills and Competencies: 
<ul>
<li>Strong knowledge of the NIST Risk Management Framework (RMF)</li>
<li>Understanding of federal cybersecurity regulations, policies, and standards</li>
<li>Proficiency with security authorization documentation and processes</li>
<li>Experience with risk assessment methodologies and practices</li>
<li>Knowledge of security control implementation and assessment</li>
<li>Strong project management skills with ability to manage multiple tasks simultaneously</li>
<li>Excellent documentation skills and attention to detail</li>
<li>Strong written and verbal communication skills</li>
<li>Experience with continuous monitoring and ongoing authorization processes</li>
<li>Knowledge of incident management and reporting requirements</li>
<li>Understanding of NIST SP 800-53 security controls</li>
<li>Ability to obtain and maintain required security clearance</li>
<li>Experience with system security planning and documentation</li>
<li>Knowledge of vulnerability management processes</li>
<li>Ability to work collaboratively in team environments</li>
</ul>
Clearance Requirement: 
<ul>
<li>Top Secret security clearance / Q</li>
</ul>
Desired Skills and Competencies: 
<ul>
<li>Master's degree in Cybersecurity, Information Technology, or related field</li>
<li>Certifications such as Security+, CISSP, CAP, or equivalent</li>
<li>Experience specifically with DOE NNSA cybersecurity requirements</li>
<li>Experience with eMASS or similar authorization management systems</li>
<li>Knowledge of FISMA compliance requirements</li>
<li>Experience with security testing and evaluation</li>
<li>Familiarity with supply chain risk management</li>
<li>Experience presenting cybersecurity concepts to management</li>
<li>Knowledge of system hardening techniques and practices</li>
<li>Experience with security architecture review</li>
<li>Understanding of cloud security principles</li>
<li>Experience with security incident handling</li>
<li>Knowledge of secure coding practices</li>
<li>Familiarity with privacy requirements and documentation</li>
</ul>
Our Equal Employment Opportunity Policy
 The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.
 The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at accommodations@koniag-gs.com or by calling 703-488-9377 to request accommodations.
 
Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.
 
Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352

Information System Security Officer (ISSO)

Search 3788+ Cybersecurity officer jobs near you this April. New roles added regularly across leading industries. Apply today.