security compliance officer

Snoonu

<div>
 
 🚀 Welcome to Your Next Adventure!
 
 
 
 We are looking for a Security Compliance Officer who will take an active role in coordinating and leading security audits, while supporting the overall compliance program. This role focuses on ensuring that company policies, procedures, and controls align with regulatory requirements and industry standards.
 
 
 
 🛠 What You&rsquo;ll Get Your Hands On
 
 
 
 <ul>
 <li>
 Coordinate and lead security audits (e.g., ISO 27001, PCI DSS, regulatory audits)
 </li>
 <li>
 Act as the main point of contact for auditors and internal stakeholders during audits
 </li>
 <li>
 Collect, review, and organize audit evidence to ensure completeness and accuracy
 </li>
 <li>
 Track audit findings, non-conformities, and remediation actions to closure
 </li>
 <li>
 Support the implementation and maintenance of security policies, procedures, and controls
 </li>
 <li>
 Ensure compliance with relevant regulations and standards (e.g., ISO 27001, Data protection laws)
 </li>
 <li>
 Maintain compliance trackers, risk registers, and audit documentation
 </li>
 <li>
 Support vendor risk assessments and third-party compliance reviews
 </li>
 <li>
 Follow up with internal teams to ensure timely completion of compliance tasks
 </li>
 <li>
 Support awareness and communication related to security policies and compliance requirements
 
 
 </li>
 </ul>
 
 🧙&zwj;&male;️ The Magic You Bring
 
 
 
 <ul>
 <li>
 1&ndash;3 years of experience in cybersecurity, risk, or compliance
 </li>
 <li>
 Hands-on experience supporting or coordinating security audits
 </li>
 <li>
 Basic understanding of security frameworks (e.g., ISO 27001, PCI-DSS)
 </li>
 <li>
 Familiarity with GCC regulations (e.g., Qatar PDPPL, Kuwait CITRA)
 </li>
 <li>
 Strong organizational and project coordination skills
 </li>
 <li>
 Ability to manage multiple stakeholders and follow up effectively
 </li>
 <li>
 Experience working with documentation, evidence collection, and tracking tools
 </li>
 <li>
 Good communication skills (written and verbal)
 
 
 </li>
 </ul>
 
 ✨ Bonus Points If You Have
 
 
 
 <ul>
 <li>
 Familiarity with GRC tools
 </li>
 <li>
 Basic understanding of cloud environments (AWS, GCP)
 </li>
 <li>
 Relevant certifications or progress toward them (e.g., ISO 27001 Foundation/Lead Implementer, Security+, CISA, or similar)
 
 
 </li>
 </ul>
 
 Inside Snoonu&rsquo;s Universe
 
 
 
 Snoonu is Qatar&rsquo;s homegrown Super App, reinventing daily life with blazing-fast delivery, shopping, and more &ndash; all in one place. Powered by tech, driven by a global team, and obsessed with making life easier.
 
 
 
 The Dream We&rsquo;re Chasing
 
 
 
 To be the first Qatari Ultra App that propels the region and its community through innovation and technology. We have global ambitions where what we do surpasses norms and limitations every time.
 
 
 
 The Quest We&rsquo;re On
 
 
 
 To radically transform how people live by leveraging technology to connect them with endless possibilities.
 
 
 
 Our Everyday Superpowers
 
 
 
 
 👥 Be Customer Obsessed
 
 : &ldquo;Focus on the customer and all else will follow.&rdquo;
 
 
 
 💪 Act with Integrity:
 
 &ldquo;We are honest, ethical, and trustworthy in everything we do.&rdquo;
 
 
 
 🧪 Be Curious and Creative:
 
 &ldquo;We constantly innovate and create solutions to bring a lasting positive impact.&rdquo;
 
 
 
 🏅Lead by Example and Take Ownership:
 
 &ldquo;Be the change you want to see and take ownership.&rdquo;
 
 
 
 🚀 Work Smart and Deliver Results
 
 : &ldquo;You can do more by doing less, better, and faster.&rdquo;
 
 
 
 👨&zwj;💼 It's All About People:
 
 &ldquo;Be a team player; together we are stronger.&rdquo;
 
 
 
 Perks &amp; Worklife Magic At Snoonu
 
 
 
 
 🌐 Global Vibes
 
 &ndash; Collaborate with a worldwide crew.
 
 
 
 🧠 Brain Boosters
 
 &ndash; Learning budgets, access to courses, and tools for your growth.
 
 
 🚒
 
 Builder&rsquo;s Playground
 
 &ndash; Own your tasks, own your path! We&rsquo;re big on autonomy.
 
 
 🏝️
 
 Flexible Time Off
 
 &ndash; We take recharging seriously. Generous leave and wellness policies.
 
 
 🛠️
 
 Agile Everything
 
 &ndash; Scrum isn&rsquo;t a buzzword here. It&rsquo;s how we roll, from product to ops.
 
 
 
 Great Place to Work&reg; Certified
 
 
 
 We&rsquo;re certified as a Great Place to Work&reg;, a recognition that celebrates a culture we&rsquo;ve built together where people come first, always. This certification reflects our commitment to creating a workplace where everyone feels valued, empowered, and inspired to do their best work.
 
 
 
 Certified for Excellence
 
 
 
 Our ISO 9001:2015 and ISO 45001:2018 certifications demonstrate our dedication to world-class quality and a safe, supportive workplace, reinforcing our promise to deliver exceptional service while prioritizing the wellbeing of our people.
 
 
 
 Beyond the Code: Giving Back Matters
 
 
 
 We don&rsquo;t just build apps. We&rsquo;re committed to doing business sustainably and giving back to the community that fuels us. From eco-conscious practices to CSR projects, we&rsquo;re always finding ways to do better&mdash;and we invite you to be a part of that mission.
 
 
 
 Diversity Isn&rsquo;t Just a Buzzword
 
 
 
 At Snoonu, fairness and inclusion are the foundation of everything we do. We&rsquo;re proud to be an equal opportunity workplace that welcomes people from every walk of life. Be bold. Be you. Thrive here.
 
 
 
 Let&rsquo;s Build the Future Together
 
 
 
 Apply now to join a team where your contributions spark a change and your voice is heard. Let&rsquo;s make some magic together.
 
 
 Stay in the loop&mdash;connect with us on LinkedIn!
</div>

Security Compliance Officer

Anotech

<div>
 
 
 🔐 Hiring: Compliance Officer (Cybersecurity &amp; Governance)
 
 
 
 
 
 
 We are looking for an experienced
 
 Compliance Officer
 
 to lead and strengthen cybersecurity governance, risk, and privacy frameworks within a large-scale national digital ecosystem.
 
 
 
 
 
 
 🎯 What We&rsquo;re Looking For
 
 
 <ul>
 <li>
 Strong experience in cybersecurity governance, compliance &amp; audit
 </li>
 <li>
 Proven expertise in risk management and security frameworks
 </li>
 <li>
 Solid knowledge of privacy regulations (GDPR, HIPAA, FFIEC, PCI, CJIS)
 </li>
 <li>
 Excellent communication &amp; stakeholder management skills
 </li>
 <li>
 Ability to build and drive a cybersecurity practice aligned with international best practices
 </li>
 </ul>
 
 
 
 
 
 Duties
 
 
 
 Several advisory services in term of Security Management and Governance are being expected to support the adaptation of the policies, guidelines, for example, covering:
 
 <ul>
 <li>
 Risk management.
 </li>
 <li>
 Threats and vulnerabilities modeling.
 </li>
 <li>
 Attacks path modeling and countermeasures.
 </li>
 <li>
 Managerial aspects concerning information security.
 </li>
 <li>
 Assessment of information security effectiveness and degrees of control.
 </li>
 <li>
 Awareness and Education around security concepts for all stakeholders.
 </li>
 <li>
 Standards for information security.
 </li>
 <li>
 Reporting (e.g. disaster recovery and business continuity).
 </li>
 <li>
 Theoretical and empirical analysis.
 </li>
 <li>
 Economic aspects of the cybersecurity ecosystem.
 </li>
 <li>
 Capability modeling.
 </li>
 </ul>
 
 
</div>

Compliance Officer

Akima

<div>Company Overview:
<div></div><div>
Akima Data Management (ADM), an Akima company, is not just another federal IT contractor. As an Alaska Native Corporation (ANC), our mission and purpose extend beyond our exciting federal projects as we support our shareholder communities in Alaska.</div><div></div><div> 
At ADM, the work you do every day makes a difference in the lives of our 15,000 I&ntilde;upiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States.</div><div></div><div> 
For our shareholders, ADM provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years.</div><div></div><div> 
For our government customers, ADM delivers agile and innovative cloud and IT services and solutions that enable mission dominance.</div><div></div><div> 
As an ADM employee, you will be surrounded by a challenging, yet supportive work environment that is committed to innovation and diversity, two of our most important values. You will also have access to our comprehensive benefits and competitive pay in addition to growth opportunities and excellent retirement options.</div>
Description:

Akima Data Management (ADM) is seeking a highly skilled and mission‑focused Information System Security Officer (ISSO) to support and oversee cybersecurity Governance, Risk, and Compliance (GRC) activities across Department of War (DoW) Office of Inspector General (OIG) information systems. The ISSO will ensure systems adhere to federal, DoW, and organizational cybersecurity requirements by developing security documentation, validating controls, supporting audits, and guiding risk mitigation efforts. 
The ideal candidate brings deep knowledge of cybersecurity frameworks, strong communication skills, and the ability to collaborate with technical teams, leadership, and external stakeholders. This role is essential to safeguarding OIG&rsquo;s mission‑critical systems and ensuring secure, compliant, and resilient operations across ashore and afloat environments. 
To join our team of outstanding professionals, apply today!
Responsibilities:
<ul><li>Develop, maintain, and enforce cybersecurity policies, plans, standards, and procedures to protect systems and sensitive information.</li><li>
Create, update, and manage System Security Plans (SSPs) and all ISSO‑related documentation in alignment with NIST, FISMA, and DoD frameworks.</li><li>
Ensure all security documentation remains accurate, complete, and audit‑ready throughout the system lifecycle.</li><li>
Conduct and support security risk assessments, vulnerability analyses, and compliance reviews.</li><li>
Document, prioritize, and track remediation of findings to ensure alignment with mission and regulatory requirements.</li><li>
Provide expert guidance on security controls, compliance strategies, and risk mitigation approaches.</li><li>
Support the development, management, and closure of Plan of Actions and Milestones (POA&amp;Ms).</li><li>
Coordinate and support internal and external audits, inspections, and assessments.</li><li>
Prepare and maintain evidence repositories, artifacts, and audit‑ready documentation.</li><li>
Ensure timely responses to findings and drive corrective actions to closure.</li><li>
Collaborate with system administrators, engineers, and development teams to ensure proper implementation and validation of security controls.</li><li>
Review system architectures, configurations, and processes to ensure compliance with applicable frameworks and best practices.</li><li>
Support continuous monitoring activities, including ongoing control assessments and documentation updates.</li><li>
Provide oversight of security incident monitoring, investigation, response, and reporting.</li><li>
Ensure timely mitigation actions and integration of lessons learned into security processes.</li><li>
Serve as a trusted advisor to leadership on emerging threats, regulatory changes, and security posture improvements.</li><li>
Act as a primary communicator with clients, leadership, and external stakeholders on cybersecurity requirements and system security status.</li><li>
Deliver clear updates, briefings, and recommendations to ensure alignment between cybersecurity activities and mission objectives.</li><li>
Translate complex security requirements into actionable guidance for technical and operational teams.</li><li>
Educate and train personnel on information security best practices, compliance requirements, and secure system operations.</li><li>
Monitor emerging technologies, policies, and threat trends to recommend enhancements to the organization&rsquo;s security posture.</li></ul>
Qualifications:
<ul><li>Active TOP SECRET with SCI clearance (required).</li><li>
Bachelor&rsquo;s degree and at least 5-10 years of relevant experience, or 10+ years of experience in lieu of a degree.</li><li>
IAM Level III certification (e.g., CGRC, CASP+ CE, CISSP, CISM) required; IAT Level III preferred.</li><li>
Strong understanding of NIST, FISMA, DoD, and organizational cybersecurity frameworks.</li><li>
Experience developing and maintaining SSPs and other RMF documentation.</li><li>
Strong communication, analytical, and documentation skills.</li></ul>
Job ID: 2026-22943 Work Type: Hybrid</div>

Information System Security Officer - TOP SECRET Clearance REQUIRED with SCI

Openkyber

<div>Role: Information Systems Security Officer 
Location: 5 days onsite in Quantico, VA 
Duration: Contract (long term) 
Citizenship: with Active Secret Clearance 
Top Skills: A&amp;A ACAS, Nessus and/or Tenable IAT Level II (Sec+, CCNA, etc) 
RMF 
RSA Archer 
eGRC 
5 years of experience
For applications and inquiries, contact: hirings@openkyber.com</div>

Information Security Fundamentals Engineer

Dubai Civil Aviation Authority

<div>
 
 
 Job Description
 
 
 
 
 
 
 
 Role Purpose
 
 
 
 
 
 
 To independently conduct aviation security inspections, audits, tests, and field monitoring activities across airports and regulated aviation entities to verify compliance with applicable aviation security regulations, standards, and approved security programmes. The role supports the effective implementation of aviation security oversight by assessing operational practices, reviewing documentation, identifying non-compliance, and reporting findings and corrective actions under the direction of the Head of Aviation Security Section.
 
 
 
 
 
 
 Key Responsibilities/Duties:
 
 
 
 
 
 
 
 1. Conduct Aviation Security Inspections and Audits
 
 
 
 Conduct independent aviation security inspections, audits, tests, and assessments at airports and regulated aviation entities to verify compliance with applicable aviation security regulations, standards, and approved security programmes.
 
 
 
 2. Evaluate Compliance and Operational Practices
 
 
 
 Assess aviation security procedures, operational practices, and control measures implemented by regulated entities to determine their effectiveness and level of compliance with approved requirements.
 
 
 
 3. Review Documentation and Security Programmes
 
 
 
 Review aviation security documentation, records, and security programmes submitted by regulated entities to verify accuracy, completeness, and compliance with regulatory requirements.
 
 
 
 4. Identify Non-Compliance and Root Causes
 
 
 
 Identify non-compliance, deficiencies, or weaknesses observed during inspections and audits, analyse underlying causes, and document findings in accordance with established inspection methodologies.
 
 
 
 5. Prepare Inspection Reports and Recommendations
 
 
 
 Prepare clear and accurate inspection, audit, and test reports, including findings, observations, and recommended corrective actions, and submit them to the Head of Aviation Security Section for review and follow-up.
 
 
 
 6. Monitor Corrective Actions and Follow-Up
 
 
 
 Monitor the implementation of corrective actions by regulated entities, verify closure of findings, and conduct follow-up inspections as required to ensure sustained compliance.
 
 
 
 7. Support Investigations and Special Assignments
 
 
 
 Participate in and support aviation security investigations, special inspections, or assessment activities as assigned, by gathering evidence, reviewing information, and contributing technical input.
 
 
 
 8. Provide Technical Guidance to Officers
 
 
 
 Provide technical guidance and on-the-job support to Aviation Security Officers during inspections and field activities to ensure consistent application of inspection standards and procedures.
 
 
 
 9. Maintain Records and Continuous Improvement
 
 
 
 Maintain inspection records and databases, contribute to the identification of recurring issues or trends, and support continuous improvement of aviation security oversight processes.
 
 
 
 10. Other Duties:
 
 
 
 Performs other job-related duties as assigned, consistent with the operational and regulatory oversight responsibilities of the Aviation Security Section.
 
 
 
 
 
 
 Qualifications
 
 
 
 
 
 
 
 Academic Qualifications:
 
 
 <ol>
 <li>
 &sect; Higher Diploma in Aviation Security, Aviation Management, Airport Operations, Security Studies, Public Safety, or a related field from a recognized institution.
 </li>
 <li>
 &sect; A Bachelor&rsquo;s degree in Aviation Security, Aviation Management, Security Studies, Public Safety, or a related discipline is considered an advantage.
 </li>
 <li>
 &sect; A Master&rsquo;s degree in Aviation Security, Aviation Management, Security Studies, Public Safety, or a related discipline is considered an additional advantage.
 </li>
 </ol>
 
 
 
 
 
 Certifications:
 
 
 
 
 
 
 &sect; ICAO Aviation Security (AVSEC) Certification or equivalent aviation security training aligned with the National Civil Aviation Security Programme (NCASP).
 
 
 &sect; ICAO National Aviation Security Inspector Certification or equivalent inspection and oversight training relevant to civil aviation authorities.
 
 
 &sect; Aviation Security Quality Control or Audit Training, covering inspection techniques, compliance verification, and reporting.
 
 
 &sect; Aviation Security Risk Assessment or Risk Management Training, relevant to threat identification, mitigation measures, and contingency planning.
 
 
 
 
 
 
 Professional Experience:
 
 
 
 &sect; A minimum of 5+ years of relevant experience in aviation security, airport operations, aviation safety, inspection, audit, or regulatory oversight roles within civil aviation authorities, airports, airlines, regulated aviation entities, or related aviation environments, for candidates holding a Bachelor&rsquo;s degree.
 
 
 &sect; Minimum of 3+ years of relevant experience in aviation security, inspection, audit, compliance, or regulatory support roles within civil aviation authorities, airports, airlines, or regulated aviation entities, for candidates holding a Master&rsquo;s degree.
 
</div>

Aviation Security Inspector

MITRE

<div>Why choose between doing meaningful work and having a fulfilling life? At MITRE, you can have both. That's because MITRE people are committed to tackling our nation's toughest challenges&mdash;and we're committed to the long-term well-being of our employees. MITRE is different from most technology companies. We are a not-for-profit corporation chartered to work for the public interest, with no commercial conflicts to influence what we do. The R&amp;D centers we operate for the government create lasting impact in fields as diverse as cybersecurity, healthcare, aviation, defense, and enterprise transformation. We're making a difference every day&mdash;working for a safer, healthier, and more secure nation and world. Our workplace reflects our values. We offer competitive benefits, exceptional professional development opportunities for career growth, and a culture of innovation that embraces adaptability, collaboration, technical excellence, and people in partnership. If this sounds like the choice you want to make, then choose MITRE - and make a difference with us.
MITRE Industrial Security Programs (ISP) oversees the operations of classified facilities and ensures the implementation of operative security controls intended for the protection of unclassified and classified national security information (NSI) developed by or entrusted to MITRE as a member of the National Industrial Security Program (NISP). The department applies resources to mitigate risk across operational domains through a continuum of security administration standards, control strategies, and oversight levels that align with corporate needs and expectations.
Roles &amp; Responsibilities:
MITRE is seeking a customer engagement-focused CSSO to manage security administration and ensure compliance for a multi-level program and associated classified areas at our MITRE Colorado Springs location. The ideal candidate will demonstrate exceptional interpersonal skills, a proactive approach to addressing mission needs, and a commitment to delivering seamless security support to internal and external stakeholders. This role requires the ability to foster strong relationships, provide clear guidance, and act as a trusted resource for program teams, ensuring security processes align with mission objectives.
CSSO &ndash; Key Responsibilities<ul><li>
Serve as primary liaison with sponsor security, ensuring full compliance with all collateral, SCI, SAP, and COMSEC regulations and guidelines.</li><li>
Operate with a high degree of independence, exercising sound judgment, initiative, and strong organizational skills with minimal supervision.</li><li>
Oversee special security areas and administer MITRE&rsquo;s collateral, SCI, and SAP security programs, including all facilities and programs under their cognizance.</li><li>
Maintain current security directives, regulations, manuals, and guidance, and ensure proper documentation for all covered facilities and programs.</li><li>
Manage personnel, information, and physical security processes in alignment with sponsor requirements.</li><li>
Ensure proper accounting, control, transmission, packaging, safeguarding, and authorized destruction of collateral, SCI, SAP, and COMSEC information, including software and cryptographic key updates.</li><li>
Certify and process visitor clearances and accesses for collateral, SCI, and SAP.</li><li>
Develop and implement Concepts of Operations, Standard Operating Procedures, and local security directives.</li><li>
Maintain accurate systems of record for all personnel under their cognizance.</li><li>
Execute all aspects of the Personnel Security Program (PSP), including nominations, investigations, validation of access requirements, briefings, NDAs/NDSs, and other personnel security actions.</li><li>
Lead ongoing security education, training, and awareness efforts, emphasizing protection of classified information, unauthorized disclosure prevention, and proper reporting.</li><li>
Maintain accreditation documentation for programs, communications systems, and information systems; conduct annual self-inspections and remediate findings.</li><li>
Review and update DD Form 254s for programs within the special security areas.</li></ul>
Basic Qualifications:<ul><li>
Typically requires a minimum of 5 years of related experience with a Bachelor&rsquo;s degree; or 3 years and a Master&rsquo;s degree; or a PhD with relevant experience who can immediately contribute at this job step; or equivalent combination of related education and work experience</li><li>
Must have demonstrable experience in developing and implementing Standard Operating Procedures (SOPs) and Concept of Operations (ConOps).</li><li>
Must have experience in Special Programs, Program Security, SCI/SAP security, or Collateral Security.</li><li>
Must have experience conducting and managing inspection preparedness and/or participation in government security inspections.</li><li>
Must have experience in any of the following: JADE, DISS, SIMS, or Scattered Castles.</li><li>
Must have experience in one of the following areas: Industrial or Government Security involving Counterintelligence, Personnel Security, Information Security, Information Systems Security, Physical Security, Technical Security, hands-on supervisory Security Leadership, or Project Management.</li><li>
Must have evident experience implementing related areas of: IC Standards or Directives; DoD Directives, Instructions, Manuals, or Standards, i.e., DoDM 5105.21 and DoDM 5205.07; 32 Code of Federal Regulations Part 117, National Industrial Security Program Operating Manual (NISPOM); or related government regulation.</li><li>
Must have excellent verbal and written communication skills and be able to effectively work with all levels of management and key management personnel.</li><li>
Active Top Secret clearance with SCI.</li><li>
Per the U.S. Government&rsquo;s eligibility requirements, you must be a U.S Citizen to be considered for a security clearance</li><li>
This position is 5 days a week onsite.</li></ul>
Preferred Qualifications:
<ul><li>5+ years of experience in one of the technical areas above.</li><li>
Experience with SIMS, DISS, JADE, Scattered Castles</li></ul>
This requisition requires the candidate to have a minimum of the following clearance(s):
Top Secret/SCI
This requisition requires the hired candidate to have or obtain, within one year from the date of hire, the following clearance(s):
Top Secret/SCI
Salary compensation range and midpoint:
$96,800 - $121,000 - $145,200 Annual
Work Location Type:
Onsite
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local or international law.
MITRE intends to maintain a website that is fully accessible to all individuals. If you are unable to search or apply for jobs and would like to request a reasonable accommodation for any part of MITRE&rsquo;s employment process, please email recruitinghelp@mitre.org for general support and collegerecruiting@mitre.org for intern positions. This service is for individuals requiring reasonable accommodation requests. Please note that vendor solicitations will not receive a reply.
Benefits information may be found here.
Copyright &copy; 1997-2026, The MITRE Corporation. All rights reserved. MITRE is a registered trademark of The MITRE Corporation. Material on this site may be copied and distributed with permission only.</div>

Contractor SAP Security Officer (CSSO)

Kratos Defense

<div>Job Description: 
Readiness Delivered. At Kratos, we encourage an entrepreneurial spirit balanced with discipline. We work hard, and take care of our customers, employees, and families. Recognized as thought leaders in our industry, we are motivated by creating and delivering innovative solutions to our nation and global customers.
Kratos is looking for an ISSO to support the Information Assurance (IA) development and sustainment of assigned systems and to serve as a security support element for technical teams. This is accomplished in compliance with CMMC and Risk Management Framework (RMF) policies and procedures, including the development of System Security Plans (SSP), Risk Assessment Reports (RAR), Plans of Action and Milestones (POA&amp;M), and Security Control Traceability Matrices (SCTM). The ISSO maintains the operational security posture to ensure that security policies, standards, and procedures are followed throughout the system lifecycle. Additionally, the ISSO supports vulnerability and risk assessment analysis to achieve and sustain Authorization to Operate (ATO) and ensures information system security requirements are integrated into configuration management for software, hardware, and firmware.
This position is based on multiple DoD Directives; including DoD 5205.07 volumes 1-4; DoDD 5205.02E; DoDI 5025.01, 5205.11, 5200.39, 5220.22, DoDM 3305.13; DoD 8140 series; Intelligence Community Directive Series 500/600/700; NIST 800 series special publications; Executive Orders 13556 and 13636, the Joint Special Access Program Implementation Guide Rev 4, and DISA Security Technical Implementation Guides.
Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. U.S. citizenship is required. Travel to customer sites and other program locations may be required.
Primary Responsibilities:
<ul><li>Perform security assessments such as vulnerability and compliance assessments, threat analysis, security code reviews, and risk assessments to identify potential design and implementation vulnerabilities.</li><li>
Participate in regular security self-inspections and audits.</li><li>
Assist with the selection and implementation of security controls and features for systems and applications.</li><li>
Identify new security features and recommend updates to existing products to ensure security is maintained throughout the product lifecycle.</li><li>
Perform security assessments on new and proposed products and technologies to ensure secure integration into the approved baseline.</li><li>
Provide product security engineering support and recommendations used to resolve integration and testing issues.</li><li>
Create and refine standard RMF Body-of-Evidence artifacts.</li><li>
Maintain a standardized set of security product requirements and produce metrics to report performance against those requirements.</li><li>
Review and define security diagnostics and tools to facilitate the analysis and reporting of security events.</li><li>
Assist other teams with mitigating security risks, responding to product security incidents, and product security related issues.</li><li>
Participate in security architecture and design review meetings.</li><li>
Manage system access and revocation requests. Track and verify DoD certification requirements in accordance with DoD 8140 guidance.</li></ul> 

Experience and Skills:<ul><li>
Solid knowledge of the DISA/DoD Risk Management Framework.</li><li>
CompTIA Security+ CE, CASP+, or equivalent cybersecurity certification.</li><li>
Experience with security controls, RMF, and STIGs.</li><li>
Familiarity with modern IT infrastructure capabilities to include virtualization, cloud deployment, and containerization.</li><li>
Self-motivated and comfortable with supporting multiple groups of developers, engineers, test, and deployment.</li><li>
Able to clearly communicate technical concepts orally and in written forms to internal and external audiences with technical and non-technical backgrounds.</li><li>
Capable of working in a fast-paced team environment.</li><li>
Excellent organizational and communication skills and able to effectively interact with managers and technical staff.</li><li>
A strong familiarity with cloud technologies and compliance requirements for cloud</li><li>
Top Secret clearance with SCI eligibility required. Candidates with Special Access Program (SAP) experience are highly valued.</li></ul>
Preferred Skills and Experience<ul><li>
2 years as an ISSO or equivalent duties.</li><li>
Familiarity with eMASS, XACTA, or similar government systems of record.</li><li>
Familiarity with Zero Trust Architecture (ZTA) requirements.</li><li>
Experience with Windows and RHEL environments.</li><li>
Experience with AWS.</li><li>
Experience with security tools such in the following areas: Malicious code prevention and analysis (i.e., Trellix), Audit log analysis (Splunk, Greylog, etc.), Patch Management and Vulnerability Analysis (Tenable Security Suite &amp; ACAS), and security tools which support the implementation of DISA STIGs (SCC, Evaluate STIG, STIG Viewer, etc.).</li></ul>
#LI-Onsite
The grade-based pay range for this job is listed below. Individual salaries within that range are determined through a wide variety of factors including but not limited to education, experience, knowledge, and skills.
Competitive salary based on experience and education 
Salary Range: $110,000-$140,000
Kratos is valued for our ability to design and deliver leading edge, resilient solutions for aerospace communication, control, awareness and mission success across a continuum of offerings-from commercial to tailored custom solutions and integrated programs. Customers trust us to stay relevant and know we are in it for the long-haul. We bring both the capability and confidence that our customers value and depend on. And we always deliver.
This posting will close within 90 days from the Posting Date.
 
Job Benefits:<ul><li>
Medical, Dental &amp; Vision Insurance Coverage</li><li>
Life/ADD &amp; Short/Long Term Disability Insurance</li><li>
401(k) Savings Plan</li><li>
Employee Stock Purchase Plan (ESPP)</li><li>
Paid Time-Off (PTO)</li><li>
Holidays</li><li>
Education Reimbursement</li></ul> 
Kratos Defense is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws.
Disability Accessibility Accommodation 
If you require an accommodation to navigate or apply to our careers site, please send your request to HRAccessibility@kratosdefense.com or call 858-964-2916. Any inquires not related to requesting an accommodation will be discarded.
Pay Transparency 
The company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.
Job Applicant Privacy Notice 
For applicants in the EU and California residents, please review our privacy notice. 
 
 
 
From: Kratos Defense</div>

Information System Security Officer

Search 10000+ Security compliance officer jobs near you this May. New roles added regularly across leading industries. Apply today.