information systems security officer

Peraton

<div><div><h5 class="jobSectionHeader"><b>ABOUT PERATON</b></h5><p>
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world&rsquo;s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we&rsquo;re keeping people around the world safe and secure.</p></div><div><h5 class="jobSectionHeader"><b>
ABOUT THE ROLE</b></h5><div><div>
Peraton has an opening for an Information Systems Security Officer (ISSO) with a proven track record of DevSecOps success to include a combination of technical skills, communication skills, and cybersecurity skills. The successful candidate will be responsible for ensuring the implementation and maintenance of security controls in accordance with RMF v5, managing ATO packages, drafting security documentation including Operating Procedures, Cybersecurity Strategy (CSS), System Security Plans (SSP) ATO packages as well as System Security and Privacy Plan (SSPP) in accordance with DoD policies, Department of Airforce (DAF) regulations and our Federal Government customer's guidance.</div><div></div><div><br>
The candidate must have expert knowledge and demonstrated experience with cybersecurity technologies, risk management, and incident response procedures as well as have a solid working understanding of computer functions, including hardware, software, and operating systems. This includes knowledge of Windows, Unix, and Linux operating systems, along with other applications such as databases, web servers, networking technologies, including routing, switching, and VPNs. It&rsquo;s a bonus if the candidate has experience with cloud computing platforms such as AWS and Azure.</div><div></div><div><br>
The ISSO must be able to work autonomously, manage their workload effectively, shift priorities with little to no loss of productivity and communicate effectively with technical and non-technical personnel.</div><div></div><ul><li><br>
<i>This position requires full-time, onsite attendance Monday through Friday in the Baltimore metropolitan area.</i></li></ul></div></div><div><h5 class="jobSectionHeader"><b>
QUALIFICATIONS</b></h5><div><div>
Required Qualifications:</div><ul><li>
Well-versed in best practices for cyber security program standards, processes, and procedures compliance, industry-standard security frameworks and demonstrated expert working knowledge of NIST Special Publication (SP) 800-53: Recommended Security Controls for Federal Information Systems, NIST SP 800-53A: Guide for Assessing the Security Controls in Federal Information Systems, AFPD 17-1 and AFI 17-130, Cybersecurity Program Management.</li><li>
Ability writing security policies and procedures, CSS, SSP, SSPP, and assess all ATO package artifacts.</li><li>
Expert knowledge of Risk Management Framework (RMF) v5 (Processes, workflow, etc.).</li><li>
Ability to use eMASS to execute, RMF v5 to include document / update system status, identify, document, and manage implementation of operational and technical security controls, implementation and risk assessment tabs, non-compliant and non-validated controls, POAM management (entry, evidence, close-out), produce report and track Plan of Action and Milestone (POA&amp;M) due dates, etc.</li><li>
The ability to complete a checklist to ensure Security Authorization Process documents are complete and comply with all guidance.</li><li>
Ability to work collaboratively with IT counterparts, communicate effectively (skilled in communicating complex technical information to non-technical audience) and coordinate STIG remediation with system administrators and developers.</li><li>
Ability to conduct risk assessments, monitor security Incidents and respond appropriately to Security Threats.</li><li>
Working understanding of network technology (includes knowledge of network protocols, TCP/IP), operating systems as well as the necessary security protocols, system details (Architecture, data flow, security cat, requirements, configuration management process/procedures, and user profile) firewalls, rules and configurations, intrusion detection tools and prevention systems, encryption techniques, Windows, Unix, and Linux) operating systems, along with other applications such as databases and web servers.</li><li>
Ability to execute tasks with little to no oversight or support as well as manage multiple, and at times, competing priorities without loss of productivity.</li><li><b>
Certifications:</b> Active IAT Level II certification (CompTIA Security+ preferred).</li><li><b>
Security Clearance:</b> Active Top Secret with SCI eligibility.</li><li><b>
Education:</b> Bachelor&rsquo;s degree and 8+ years of experience, or Master&rsquo;s Degree and 6+ years of experience, or 3 years with PhD. A degree in one of the following fields of study is highly desired: Information Technology, Computer Science, Cybersecurity, Information Systems, Software Engineering, or Data Science. However, an additional 4 years of relevant experience or specialized training may be considered in lieu of Bachelor's degree.</li></ul><div>
 Desired Qualifications:</div><ul><li>
Certifications: CASP+, CISM, CISSP, CISSP-ISSMP, FITSP-M, GCIA, GCIH, GICSP, GSLC.</li><li>
Experience transitioning from RMF v4 to v5.</li><li>
Basic understanding of identity and access management system capabilities and configuration.</li><li>
Experience with cloud computing platforms such as AWS and Azure.</li><li>
Experience with TASKORDS, OPORDS, etc.</li><li>
Experience leading Cybersecurity (ISSO &amp; ISSE) teams.</li></ul></div></div><div><h5 class="jobSectionHeader"><b>
DETAILS</b></h5><div><p>
<b>Target Salary Range:</b> $112,000 - $179,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual&rsquo;s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
</p></div><div><p>
<b>Benefits Statement:</b> Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
</p></div><div><p>
<b>Application Statements:</b> The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity.
</p></div><p><b>
EEO:</b> Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</p></div></div><div></div>

INFORMATION SYSTEMS SECURITY OFFICER

DCS Corp

<div><div><p>DCS Corp is seeking a <b>Senior Information Systems Security Officer (ISSO)</b> to support our customer at <b>Nellis AFB, NV.</b></p><p><b>
****This is a temporary position expected to last approximately 26 weeks, though the assignment may conclude sooner based on contract or customer needs.****</b></p><p><b>
Essential Job Functions:</b></p><p>
Ensure the confidentiality, integrity, and availability of classified Information Systems (IS) and data using Air Force Approved network engineering, information security standards and approved industry best practices.</p><p>
Perform upgrades, security patches, back-ups, account maintenance, and access control maintenance.</p><p>
Assist the customer with developing and sustaining enterprise Risk Management Framework (RMF) accreditation packages.</p><p>
Providing Information System Security Operations support, integration services, technical assessments, and solutions to enable cybersecurity.</p><p>
Apply Secure Technical Implementation Guide (STIG) best practices to classified and unclassified. information systems, networking equipment, and applicable software and applications.</p><p>
Perform vulnerability risk assessment analysis to support authorization and accreditation.</p><p>
Assist customer preparing and reviewing documentation to include System Security Plans (SSPs), Risk Assessment Reports, Authorization to Operate (ATO) packages, policies, and Security Controls. Traceability Matrices (SCTMs) and upload documents into eMASS or other databases.</p><p>
Conduct periodic reviews and evaluations of required IS policies and procedures.</p><p>
Support IS Security inspections, tests, and reviews.</p><p>
Perform generation and collection of audit logs for IS.</p><p><b>
Required Skills:</b></p><p>
Due to the sensitivity of customer related requirements, US Citizenship is required.</p><p>
A BS Degree in Computer Science or relevant field with at least 12 years of work experience.</p><p>
Current Secret Clearance.</p><p>
Must be compliant with DoD 8140.03 with CASP or CISSP certification.</p><p><b>
Desired Skills:</b></p><p>
Demonstrated Cybersecurity Analyst foundation with strong working knowledge and understanding of Cyber technologies, RMF process.</p><p>
Strong foundation and working knowledge with Nessus, SCAP Compliance Checker, STIGs, ACAS, eMASS, hardening systems and applying IA controls.</p><p>
Excellent verbal and written communication skills along with customer interaction and presentation capabilities required.</p><p>
Familiarity with DoD system security accreditation processes and tools.</p><p>
Experience as a Unix System Administrator, Cisco Network Administrator or Windows System Administrator background.</p></div></div><p></p>

Information Security Systems Officer

Openkyber

<div><b>Role:</b> Information Systems Security Officer<br>
<b>Location:</b> 5 days onsite in Quantico, VA<br>
<b>Duration:</b> Contract (long term)<br>
<b>Citizenship:</b> with Active Secret Clearance<br>
<b>Top Skills:</b> A&amp;A ACAS, Nessus and/or Tenable IAT Level II (Sec+, CCNA, etc)<br>
<b>RMF</b><br>
<b>RSA Archer</b><br>
<b>eGRC</b><br>
<b>5 years of experience</b>
<p><b>For applications and inquiries, contact:</b> hirings@openkyber.com</p></div>

Information Security Fundamentals Engineer

Paragon Technology Group

<div>
 <br/>
 <p>
  Paragon is recruiting for a
  <strong>
   Security Engineer II
  </strong>
  to work on the PEO-T contract for USTRANSCOM.
 </p>
 <br/>
 <p>
  Security Engineer II provides technical support in the areas of vulnerability and risk assessment, network security, product evaluation, and security implementation. Understands Information Security Continuous Monitoring (ISCM) concepts, security automation, and risk dashboarding tools. Must adhere to USTRANSCOM processes and procedures to identify and respond to risk while supporting efficient, accurate Assessment &amp; Authorization (A&amp;A) reporting to facilitate ongoing authorizations, secure release deployments, modernizations, migrations, and overall security enhancements. A high-level of autonomy is required for this role. Capable of defining solution recommendations and working with management to improve efficiency in processes and procedures. Capable of communicating technical details effectively within their assigned Program Management Offices (PMOs), translating complex security risks into operational or business impact for leadership and non-technical stakeholders. Effective communication skills and willingness to collaborate with peers and management are critical to success. May be asked to provide supplementary support to additional PMOs within the contract purview.
 </p>
 <br/>
 <p>
  <strong>
   Tasks
  </strong>
  &nbsp;include, but are not limited to, the following:
 </p>
 <br/>
 <ul>
  <br/>
  <li>
   Reviews evolving NIST requirements to support risk assessment activities associated with the affiliated system requirements and specifications (execution, mapping, and compliance tracking).&nbsp;
  </li>
  <br/>
  <li>
   Prepares detailed specifications from which cybersecurity deficiencies identified during risk assessment will be mitigated/remediated and conducts follow-up risk assessment to ensure proper secure coding practices and STIG/SRG implementation are being built-in/enforced to the greatest extent possible.&nbsp;
  </li>
  <br/>
  <li>
   Collaborates closely with government customers to develop appropriate POA&amp;Ms and support risk acceptance activities as needed to support risk management processes. Reviews evolving National Institute of Standards and Technology (NIST) requirements to support risk assessment activities associated with the affiliated system requirements and specifications (execution, mapping, and compliance tracking).
  </li>
  <br/>
  <li>
   Prepares detailed specifications from which cybersecurity deficiencies identified during risk assessment will be mitigated/remediated and conducts follow-up risk assessment to ensure proper secure coding practices and Security Technical Implementation Guide&nbsp;(STIG)/Security Requirements Guide (SRG) implementation are being built-in/enforced to the greatest extent possible.&nbsp;
  </li>
  <br/>
  <li>
   Collaborate closely with government customers to develop appropriate Plan of Action and Milestones (POA&amp;Ms) and support risk acceptance activities as needed to support risk management processes.
  </li>
  <br/>
  <li>
   Responsible for designing and implementing solutions for protecting confidentiality, integrity, and availability of sensitive information.
  </li>
  <br/>
  <li>
   Provides technical evaluations of IT systems and assists with making security improvements.
  </li>
  <br/>
  <li>
   Participates in design of information system contingency plans that maintain appropriate levels of protection and meet time requirements for minimizing operations impact to customer organization.
  </li>
  <br/>
  <li>
   Conducts security product evaluations, and recommends products, technologies and upgrades to improve the organization&rsquo;s security posture.
  </li>
  <br/>
  <li>
   Conduct testing and audit log reviews to evaluate the effectiveness of current security measures.
  </li>
  <br/>
  <li>
   Participates in team initiatives including the drafting of deliverables and peer reviews of others&rsquo; products.
  </li>
  <br/>
 </ul>
 <br/>
 <p>
  <strong>
   Qualifications:
  </strong>
 </p>
 <br/>
 <ul>
  <br/>
  <li>
   Experience developing/reviewing system authorization documentation (family plans and supplementary artifacts) in accordance with Department of War (DoW) implementation of the Risk Management Framework (RMF)
  </li>
  <br/>
  <li>
   Experience participating in Technical Interchange Meetings (TIMs) on a wide range of Program Management Office (PMO) security engineering topics
  </li>
  <br/>
  <li>
   Experience participating in acquisition program engineering milestone reviews
  </li>
  <br/>
  <li>
   Experience coordinating and collaborating with Development contract personnel in Security, System Administration, System Engineering, and other supporting roles to identify, document, and plan for security enhancement requirements and to resolve program security issues&nbsp;
  </li>
  <br/>
  <li>
   Experience coordinating and collaborating with inheritance providers (e.g., enterprise teams in USTRANSCOM, Surface Deployment and Distribution Command [SDDC], Air Mobility Command [AMC], Defense Information Systems Agency [DISA] Security Office, etc.) to determine hybrid security requirements and established appropriate inheritance relationships using tools provided
  </li>
  <br/>
  <li>
   Experience performing security activities to maintain authorization of PMO programs (e.g., categorization, control selection, evidence collection and audit, risk assessments, reporting, security impact assessments affiliated with change management practices, Incident Response (IR)/Contingency Plan (CP) Exercise Support, Federal Information Security Management Act (FISMA) Reporting, Continuous Monitoring, etc.)
  </li>
  <br/>
  <li>
   Experience using DoW Enterprise Mission Assurance Support Service (eMASS) system&nbsp;
  </li>
  <br/>
  <li>
   Experience providing support to ensure PMO systems are designed, developed, and deployed in accordance with applicable Executive Orders, Federal Policy, DoW regulations, USTRANSCOM requirements, and commercial best practice
  </li>
  <br/>
  <li>
   Experience reviewing vulnerability scans using Assured Compliance Assessment Solution (ACAS)/Nessus, analyzing outputs to identify vulnerabilities, recommending mitigation and remediation actions, ingest actions in eMASS
  </li>
  <br/>
  <li>
   Experience supporting the Government Customer through critical review of documented DISA STIGs/SRGs, providing technical feedback and recommendations to customer for areas of improvement in reporting accurate qualitative results, and ingesting final product in the government-supplied tool to support risk assessment of the NIST controls.
  </li>
  <br/>
  <li>
   Experience generating, sustaining, extending (when appropriate), and reporting status associated with POA&amp;M requirements
  </li>
  <br/>
  <li>
   Experience conducting and evaluating security testing activities including security assessments and audits
  </li>
  <br/>
  <li>
   Experience supporting operational security activities (e.g., risk mitigation, host security, encryption, intrusion detection, Virtual Private Network [VPN] implementations, and viral detections)
  </li>
  <br/>
  <li>
   Experience with security lockdown and/or hardening of servers and network devices
  </li>
  <br/>
  <li>
   Ability to coordinate overall security strategy with multiple agencies, Authorizing Official (AO) representatives
  </li>
  <br/>
  <li>
   Ability to coordinate with developers, vendors, and other government organizations/agencies to assess security engineering issues
  </li>
  <br/>
  <li>
   Experience recommending changes to network and security architecture to improve security posture and meet operational performance requirements
  </li>
  <br/>
 </ul>
 <br/>
 <p>
  <strong>
   Required Education/Certification
  </strong>
 </p>
 <br/>
 <ul>
  <br/>
  <li>
   Must be a US Citizen with an active DoW Secret, or higher, clearance
  </li>
  <br/>
  <li>
   Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or equivalent Information Technology academic studies
  </li>
  <br/>
  <li>
   Active IAM II Certification in Good Standing (e.g., ISC2 CGRC [formerly CAP], CompTIA Security X [formerly CASP+CE], ISACA CISM, ISC2 CISSP (or associate), GIAC GSLC, EC-Council CCISO)
  </li>
  <br/>
  <li>
   1+ years of Security Engineering experience as Information Systems Security Officer (ISSO), Information Systems Security Manager (ISSM), Security Controls Assessor (SCA), Cyber Security Analyst/Engineer
  </li>
  <br/>
 </ul>
 <br/>
 <p>
  <br/>
 </p>
 <br/>
 <p>
  <strong>
   What Success Looks Like
  </strong>
 </p>
 <br/>
 <p>
  Success in this role is demonstrated by clearly defined, traceable requirements that reflect validated operational needs; well-facilitated stakeholder forums that drive timely decisions; and functional designs that enable development teams to deliver compliant, mission-aligned capabilities. The Analyst is trusted by government leadership as a reliable integrator across Services, Agencies, and functional domains.
 </p>
 <br/>
 <p>
  <strong>
   How the Work Gets Done at Paragon
  </strong>
 </p>
 <br/>
 <p>
  At Paragon, work is executed through disciplined collaboration, accountability to mission outcomes, and respect for government processes. Analysts lead with preparation and clarity, facilitate structured decision-making forums, and ensure requirements are governed, documented, and traceable from operational need through delivery. The focus is on predictable execution, transparency, and stewardship of government resources.
 </p>
 <br/>
 <p>
  <strong>
   Working Conditions
  </strong>
 </p>
 <br/>
 <p>
  Work is primarily performed in a professional office or government facility environment.
 </p>
 <br/>
 <p>
  Position may require participation in classified discussions consistent with clearance level.
 </p>
 <br/>
 <p>
  Collaboration with geographically dispersed stakeholders is expected.
 </p>
 <br/>
 <p>
  Standard business hours with occasional schedule flexibility to support mission needs.
 </p>
 <br/>
 <p>
  <strong>
   Why Paragon
  </strong>
 </p>
 <br/>
 <p>
  Paragon Technology Group delivers mission-critical outcomes through disciplined execution, professional accountability, and respect for the trust placed in us by our government partners. Team members are empowered to own their work, contribute meaningfully to national defense missions, and operate in an environment that values clarity, predictability, and long-term stewardship.
 </p>
</div>


Security Engineer II

Kratos Defense

<div><b>Job Description:</b><p><b><br>
Readiness Delivered.</b> At Kratos, we encourage an entrepreneurial spirit balanced with discipline. We work hard, and take care of our customers, employees, and families. Recognized as thought leaders in our industry, we are motivated by creating and delivering innovative solutions to our nation and global customers.
</p><p>Kratos is looking for an<b> ISSO</b> to support the Information Assurance (IA) development and sustainment of assigned systems and to serve as a security support element for technical teams. This is accomplished in compliance with CMMC and Risk Management Framework (RMF) policies and procedures, including the development of System Security Plans (SSP), Risk Assessment Reports (RAR), Plans of Action and Milestones (POA&amp;M), and Security Control Traceability Matrices (SCTM). The ISSO maintains the operational security posture to ensure that security policies, standards, and procedures are followed throughout the system lifecycle. Additionally, the ISSO supports vulnerability and risk assessment analysis to achieve and sustain Authorization to Operate (ATO) and ensures information system security requirements are integrated into configuration management for software, hardware, and firmware.
</p><p>This position is based on multiple DoD Directives; including DoD 5205.07 volumes 1-4; DoDD 5205.02E; DoDI 5025.01, 5205.11, 5200.39, 5220.22, DoDM 3305.13; DoD 8140 series; Intelligence Community Directive Series 500/600/700; NIST 800 series special publications; Executive Orders 13556 and 13636, the Joint Special Access Program Implementation Guide Rev 4, and DISA Security Technical Implementation Guides.
</p><p>Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. U.S. citizenship is required. Travel to customer sites and other program locations may be required.
</p><p>Primary Responsibilities:
</p><ul><li>Perform security assessments such as vulnerability and compliance assessments, threat analysis, security code reviews, and risk assessments to identify potential design and implementation vulnerabilities.</li><li>
Participate in regular security self-inspections and audits.</li><li>
Assist with the selection and implementation of security controls and features for systems and applications.</li><li>
Identify new security features and recommend updates to existing products to ensure security is maintained throughout the product lifecycle.</li><li>
Perform security assessments on new and proposed products and technologies to ensure secure integration into the approved baseline.</li><li>
Provide product security engineering support and recommendations used to resolve integration and testing issues.</li><li>
Create and refine standard RMF Body-of-Evidence artifacts.</li><li>
Maintain a standardized set of security product requirements and produce metrics to report performance against those requirements.</li><li>
Review and define security diagnostics and tools to facilitate the analysis and reporting of security events.</li><li>
Assist other teams with mitigating security risks, responding to product security incidents, and product security related issues.</li><li>
Participate in security architecture and design review meetings.</li><li>
Manage system access and revocation requests. Track and verify DoD certification requirements in accordance with DoD 8140 guidance.</li></ul><br>
<b>
Experience and Skills:</b><ul><li>
Solid knowledge of the <b>DISA/DoD Risk Management Framework</b>.</li><li>
CompTIA <b>Security+ CE, CASP+</b>, or equivalent cybersecurity certification.</li><li>
Experience with <b>security controls, RMF, and STIGs</b>.</li><li>
Familiarity with modern IT infrastructure capabilities to include virtualization, cloud deployment, and containerization.</li><li>
Self-motivated and comfortable with supporting multiple groups of developers, engineers, test, and deployment.</li><li>
Able to clearly communicate technical concepts orally and in written forms to internal and external audiences with technical and non-technical backgrounds.</li><li>
Capable of working in a fast-paced team environment.</li><li>
Excellent organizational and communication skills and able to effectively interact with managers and technical staff.</li><li>
A strong familiarity with cloud technologies and compliance requirements for cloud</li><li><b>
Top Secret clearance with SCI</b> eligibility required. Candidates with Special Access Program (SAP) experience are highly valued.</li></ul><p><b>
Preferred Skills and Experience</b></p><ul><li>
2 years as an ISSO or equivalent duties.</li><li>
Familiarity with eMASS, XACTA, or similar government systems of record.</li><li>
Familiarity with Zero Trust Architecture (ZTA) requirements.</li><li>
Experience with Windows and RHEL environments.</li><li>
Experience with AWS.</li><li>
Experience with security tools such in the following areas: Malicious code prevention and analysis (i.e., Trellix), Audit log analysis (Splunk, Greylog, etc.), Patch Management and Vulnerability Analysis (Tenable Security Suite &amp; ACAS), and security tools which support the implementation of DISA STIGs (SCC, Evaluate STIG, STIG Viewer, etc.).</li></ul><p><b>
#LI-Onsite</b></p><p><b>
The grade-based pay range for this job is listed below. Individual salaries within that range are determined through a wide variety of factors including but not limited to education, experience, knowledge, and skills.
</b></p><p><i>Competitive salary based on experience and education</i><br>
<i>Salary Range: $110,000-$140,000</i></p><p>
Kratos is valued for our ability to design and deliver leading edge, resilient solutions for aerospace communication, control, awareness and mission success across a continuum of offerings-from commercial to tailored custom solutions and integrated programs. Customers trust us to stay relevant and know we are in it for the long-haul. We bring both the capability and confidence that our customers value and depend on. And we always deliver.
</p><p><b>This posting will close within 90 days from the Posting Date.
</b><br>
<b>Job Benefits:</b></p><p></p><ul><li>
Medical, Dental &amp; Vision Insurance Coverage</li><li>
Life/ADD &amp; Short/Long Term Disability Insurance</li><li>
401(k) Savings Plan</li><li>
Employee Stock Purchase Plan (ESPP)</li><li>
Paid Time-Off (PTO)</li><li>
Holidays</li><li>
Education Reimbursement</li></ul><p><br>
Kratos Defense is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws.
</p><p><b>Disability Accessibility Accommodation</b><br>
If you require an accommodation to navigate or apply to our careers site, please send your request to HRAccessibility@kratosdefense.com or call 858-964-2916. Any inquires not related to requesting an accommodation will be discarded.
</p><p><b>Pay Transparency</b><br>
The company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.
</p><p><b>Job Applicant Privacy Notice</b><br>
For applicants in the EU and California residents, please review our privacy notice.<br>
<br>
<br>
<br>
From: Kratos Defense</p></div>

Information System Security Officer

Engineerio Tech Services And Solutions

<p><b>Job Description: IT Officer</b><br/><b>Location: Wapda Town Lahore</b></p><p><b>Qualification:</b></p><p>Diploma Information Technology (IT)/ Technical Degree in Information Technology (IT)</p><p><b>Job Summary:</b></p><p>The IT Officer will be responsible for managing and supporting the company&rsquo;s IT infrastructure, systems, hardware, software, and network operations. The role includes troubleshooting technical issues, maintaining system security, and ensuring smooth day-to-day IT operations.</p><p><b>Key Responsibilities:</b></p><ul><li>Install, configure, and maintain computer hardware, software, and networks</li><li>Provide technical support to employees for IT-related issues</li><li>Monitor and maintain internet, email, and network systems</li><li>Troubleshoot hardware, software, and system problems</li><li>Manage system backups and data security</li><li>Install and update antivirus and security software</li><li>Coordinate with vendors for IT procurement and maintenance</li><li>Ensure smooth operation of company systems and minimize downtime</li></ul><p><b>Skills Required:</b></p><ul><li>Good knowledge of computer hardware and networking</li><li>Understanding of Windows operating systems and basic server management</li><li>Knowledge of troubleshooting and IT support</li><li>Good communication and problem-solving skills</li></ul><p><b>Experience:</b></p><p>1&ndash;2 years of relevant IT support experience preferred</p><p>Work Location: In person</p>

IT OFFICER

Care New England Health System

<p></p><div><div><div><div><div><b>Department:</b></div> <div>CNE-IS ADMINISTRATION</div>
</div><br>
<div><div><b>Operating Unit</b></div> <div>Care New England
<br>
</div></div><br>
<div><div><b>Location:</b></div> <div>Warwick, RI
<br>
</div></div><br>
<div><div><b>Job ID:</b></div> <div>24299
<br>
</div></div><br>
<div><div><b>Job Status:</b></div> <div>Full Time
<br>
</div></div><br>
<div><div><b>Shift: </b></div><div>Days
<br>
</div></div><br>
<div><div><b>Schedule:</b></div> <div>Other<br>
<br>
</div></div><br>
</div></div><div><p><b>Job Summary:</b></p>
<p>The Director, Information Security holds primary responsibility for safeguarding the Care New England (CNE) computing environment. This includes securing systems across all CNE operating units, directing enterprise-wide cybersecurity strategy, and ensuring compliance with HIPAA, PCI, and all applicable federal, state, local, and industry regulations.</p>
<p>The Director serves as the Chief Information Security Officer (CISO) for CNE, providing leadership in risk assessment, incident response, regulatory compliance, and cybersecurity governance. The role oversees information security tools, policies, vulnerability assessments, and monitoring systems; responds to security threats; leads mitigation activities; and collaborates closely with IS teams, Audit/Compliance, HR, Finance, and Legal.</p>
<p>This leader develops and manages the Information Security program, directs security staff, sets security standards, leads incident management, evaluates emerging technologies, manages vendor relationships, and ensures organizational readiness through education, training, and participation in business continuity and disaster recovery planning.</p>
<p><b>Duties and Responsibilities:</b></p>
<ul><li>Develop and maintain the enterprise Information Security Program.
</li><li>Establish protection goals, objectives, and metrics aligned with organizational strategy.
</li><li>Serve as the Chief Information Security Officer (CISO) for CNE.
</li><li>Coordinate with the Chief Privacy Officer to ensure compliant reporting of security incidents.
</li><li>Implement, manage, and maintain enterprise security systems and applications.
</li><li>Lead vulnerability assessments and ensure timely remediation.
</li><li>Oversee security incident response, forensic investigations, and threat mitigation efforts.
</li><li>Examine emerging technologies and assess their security implications.
</li><li>Lead ongoing risk assessment programs addressing information security and privacy.
</li><li>Ensure compliance with HIPAA, PCI, and applicable state and federal regulations.
</li><li>Develop and implement security policies, standards, guidelines, and procedures.
</li><li>Coordinate with IS teams, Audit/Compliance, HR, Finance, and Legal to align security efforts.
</li><li>Participate in disaster recovery and business continuity planning.
</li><li>Lead security education and awareness initiatives for staff across CNE.
</li><li>Manage security vendors responsible for operations, maintenance, and enhancements.
</li><li>Ensure vendor service delivery aligns with organizational security requirements and policies.
</li><li>Negotiate and manage contracts and service-level agreements with external partners.
</li><li>Manage, mentor, and develop information security staff.
</li><li>Promote professional growth and maintain awareness of industry trends.
</li><li>Provide input on resource allocation and security budgeting.
</li><li>Maintain 24-hour on-call availability to support critical operational needs.
</li><li>Perform other job-related duties as assigned.</li></ul>
<p><b>Requirements:</b></p>
<p>Bachelor's Degree Required (computer science, MIS or related field)</p>
<p>Minimum of 7-10 years of progressive experience in information security, Strong technical background in infrastructure, network security, firewalls, and cloud environments, Experience conducting forensic investigations and managing enterprise security products.</p>
<p>Security certifications required: CISSP, GIAC, SANS, or similar. Audit certification preferred: CISA.</p>
<p>Participation in national and regional security organizations preferred.</p>
<ul><li>Deep knowledge of cybersecurity principles, threat landscapes, and protection technologies.
</li><li>Strong working knowledge of enterprise infrastructure, network security, firewalls, and cloud platforms.
</li><li>Expertise in vulnerability management, forensic investigation, risk assessment, and incident response.
</li><li>Ability to develop enterprise-wide policies and governance frameworks.
</li><li>Strong communication skills for engaging executive leadership and cross-functional stakeholders.
</li><li>Exceptional organization, analytical, and decision-making abilities.
</li><li>Ability to manage technical teams and develop staff.
</li><li>Strong vendor management and contract negotiation skills.
</li><li>Ability to maintain confidentiality and uphold ethical and regulatory standards</li></ul>
<p>Additional Information:
<br>
Care New England Health System (CNE) and its member institutions, Butler Hospital, Women &amp; Infants Hospital, Kent Hospital, VNA of Care New England, Integra, The Providence Center, and Care New England Medical Group, and our Wellness Center, are trusted organizations fueling the latest advances in medical research, attracting top specialty-trained doctors, and honing renowned services and innovative programs to engage in the important discussions people need to have about their health.</p>
<p>EEOC Statement: Care New England is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.</p>
<p>Ethics Statement: Employee conducts himself/herself consistent with the ethical standards of the organization including, but not limited to hospital policy, mission, vision, and values.
<br>
Americans with Disability Act Statement: External and internal applicants, as well as position incumbents who become disabled must be able to perform the essential job-specific functions either unaided or with the assistance of a reasonable accommodation, to be determined by the organization on a case-by-case basis.</p></div></div><div></div>

Director Information Security

Search 10000+ Information systems security officer jobs near you this May. New roles added regularly across leading industries. Apply today.