Information System Security Officer – ISSO

Emploi pas sur LinkedIn

🕒 il y a 9 jours

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Koniag Government Services

Site WebLinkedInTous les Emplois

1001 - 5000 employés

Fondée en 1975

🏛️ Gouvernement

🎖️ Défense

💼 Conseil

Government • Defense • Consulting

Koniag Government Services est une société indigène d'Alaska (ANC) qui fournit une expertise technique, professionnelle et opérationnelle au secteur public américain. KGS soutient les clients de la Défense et du Renseignement, les civils fédéraux, et ceux de la Santé avec des solutions d'entreprise, des services professionnels et une gestion des opérations. Elle met l'accent sur des résultats axés sur la mission, une rapidité de contractualisation (récompenses directes ANC) et des partenariats stratégiques/technologiques. L'entreprise se positionne comme un partenaire de mission fournissant du personnel, de la technologie et de la gestion de programmes à ses clients gouvernementaux.

Description

• Serve as the Information System Security Officer (ISSO) for one or more ICAM-related information systems, ensuring continuous monitoring and compliance with applicable federal security frameworks. • Develop, maintain, and update System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and other Authorization to Operate (ATO) documentation in accordance with NIST and agency-specific requirements. • Support the Assessment and Authorization (A&A) process, including facilitating security assessments, coordinating with Security Control Assessors (SCAs), and preparing authorization packages. • Monitor and manage the security posture of ICAM systems, including identity proofing, credentialing, authentication, and access control solutions. • Review and analyze audit logs, security alerts, and system events to identify anomalies, potential threats, and compliance gaps. • Coordinate with system administrators, developers, and engineers to ensure security controls are properly implemented and functioning as intended. • Identify and document system vulnerabilities and risks, coordinating remediation efforts and tracking progress through the POA&M process. • Support the implementation and governance of ICAM policies, procedures, and standards in alignment with federal mandates such as FICAM, HSPD-12, EO 14028, and OMB Memoranda. • Participate in security incident response activities, including investigation, containment, and reporting of security events related to identity and access management systems. • Conduct periodic security reviews and assessments to ensure ongoing compliance with security requirements and ICAM best practices. • Provide security guidance and recommendations to program teams regarding identity management, privileged access management (PAM), multi-factor authentication (MFA), and zero trust principles. • Collaborate with cross-functional teams including IT, compliance, and operations staff to align security practices with organizational and mission objectives. • Prepare and deliver security briefings, reports, and documentation for government stakeholders and leadership.

🎯 Exigences

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field from an accredited college or university. • 5+ years of experience in information security, with at least 2 years of direct experience in an ISSO role or equivalent security capacity. • Demonstrated experience supporting the NIST Risk Management Framework (RMF) and ATO processes. • Experience working with ICAM technologies and frameworks, including identity proofing, PKI, MFA, and access management solutions. • Active or ability to obtain the required security clearance. • Exceptional communication skills in English – both written and oral – with the ability to communicate effectively with technical and non-technical stakeholders, including government leadership. • Strong working knowledge of the NIST Risk Management Framework (RMF), including NIST SP 800-53, NIST SP 800-37, and FIPS 199/200. • Proficiency in developing and maintaining ATO documentation, including SSPs, POA&Ms, Security Assessment Reports (SARs), and Interconnection Security Agreements (ISAs). • Knowledge of ICAM concepts including identity lifecycle management, credentialing, authentication protocols (MFA, PIV/CAC), privileged access management (PAM), and single sign-on (SSO).

🏖️ Avantages

• health, dental, and vision insurance • 401K with company matching • flexible spending accounts • paid holidays • three weeks paid time off • extraordinary benefits package