Job Description

Information System Security Officer Remote If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level! SecuriGence delivers essential technology services that support our customers’ missions. We are seeking an Information System Security Officer to support the Department of Health and Human Services, Administration for Community Living, Enterprise IT Services Program. Reporting to the Program Manager, the ISSO maintains system security and privacy documentation, coordinates assessments and authorization activities, tracks risks and remediation, and prepares assigned cybersecurity deliverables. The ISSO works with system owners, technical teams, assessors, privacy personnel, and government security officials to support FISMA compliance and the NIST Risk Management Framework. Government officials retain authorization and risk acceptance decisions. Prepare or coordinate the Technical Cybersecurity Posture Report and Cyber Security Playbook on the agreed schedule; Security documentation — Update system security plans, configuration management plans, contingency plans, privacy impact assessments/privacy needs assessments, control assessment plans, and other system documentation annually. Coordinate annual updates to ACL Information Security and Privacy Policy and prepare security impact assessments as required. Assessment reporting — Prepare or coordinate the Risk Assessment Report, Security Assessment Report and memorandum, and support materials within two weeks after completion of a Security Control Assessment. Risk and remediation — Maintain risk and issue records and track remediation owners, milestones, evidence, and overdue actions. support deviation waiver risk documentation as needed and the Risk Review and Accepted Risk Review Schedules when established. Route risk acceptance decisions to authorized government officials. Continuous monitoring and vulnerabilities — Review vulnerability scans and monitoring results, coordinate remediation with technical teams, verify corrective action evidence, and prepare monthly vulnerability reports in the required format. Support the ACL Cybersecurity Gap Analysis Report, Unsupported Software Lifecycle Report, and Continuous Diagnostics and Mitigation Strategy on schedules to be determined. Contingency planning — Maintain contingency planning documentation, coordinate the annual Contingency Plan Test, document results and corrective actions, and track follow-through with system owners and operations teams. Coordinate security incident reporting, response documentation, communications, exercises, and lessons learned with designated government and contractor response personnel. Security and privacy awareness — Develop and support ongoing phishing scenarios, tests, educational materials and reports; security awareness communications, training and exercises; security tests, training, educational materials and audits; and incident response communications, training and exercises. Coordinate security requirements for asset and license inventories, configuration management, tool/change requests, cloud operating procedures, and technical designs with the responsible leads. Ensure all reports’ reference and cite the contract number. Transition and technical support — Support security knowledge transfer, documentation handover, and transition-in and transition-out planning under the Program Manager’s schedule. Provide ad hoc security technical support and tracking inputs upon request, support quality assurance reviews Bachelor’s degree in information technology or cybersecurity, or additional experience in lieu of a degree.

• 5+ years of experience in cybersecurity, information assurance, or a related field, preferably within a federal environment.
• Certified Information Systems Security Professional, or equivalent experience and knowledge commensurate with certification requirements.
• Certified Information Security Manager or Certified Information Systems Auditor.
• Ability to translate assessment and vulnerability findings into documented risks, practical remediation actions, and clear management reports.

Proficiency with vulnerability scanners, security information and event management systems, and intrusion detection systems. Working knowledge of continuous monitoring, CDM, identity and access management, zero-trust concepts, cloud security, incident response, and privacy practices. Ability to coordinate annual assessments and exercises, deliver security and privacy awareness materials, maintain controlled records, and meet recurring and event-driven reporting deadlines. At Chenega MIOS, our professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe there’s always room to learn. We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them be healthy, centered, confident, and aware. We offer well-being programs and continuously look for new ways to maintain a culture where we excel and lead healthy, happy lives. This purpose defines who we are and extends to relationships with our clients, our team members, and our communities. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities. Chenega MIOS News- To help you with your research, we suggest you review the following links: Chenega MIOS web site - LinkedIn - Facebook - Remote

Job Tags

Contract work, For contractors, Remote work

Similar Jobs