[Hiring] Information System Security Officer @Chenega Corporation

Role Description

The Information System Security Officer (ISSO) serves as the senior cybersecurity lead responsible for ensuring the security, compliance, accreditation, and continuous protection of the GSAFleet.gov environment.

• Plan, implement, assess, and monitor GSAFleet.gov security controls throughout development and operations.
• Coordinate secure design, access control, vulnerability scanning, remediation, and security checks in CI/CD workflows.
• Develop and maintain security-plan inputs, control implementation evidence, assessment materials, POA&Ms, and authorization-package documentation necessary to support and maintain the GSAFleet.gov ATO.
• Review application, infrastructure, data, and interface changes for security and privacy impact.
• Support security incidents, audits, continuous monitoring, and ATO maintenance; advise teams on corrective actions.
• Respond to and coordinate resolution of information-security incidents, breaches, and other security events affecting GSAFleet.gov.
• Coordinate security deliverables and ensure vulnerabilities within the contractor scope are addressed.
• Other duties as assigned.

Qualifications

• Bachelor’s Degree in a related field.
• 10+ years of developing, implementing, and managing security controls for large-scale information systems.
• Must be able to undergo a Tier 2S Investigation and receive a favorable investigation/adjudication outcome.
• Successfully pass background and drug screening.

Requirements

• CISSP, CISM, or cloud-security credentials may be preferred.
• Demonstrated experience managing FISMA compliance for large systems.
• Experience applying NIST Risk Management Framework requirements, processes, and procedures.
• Demonstrated experience operating in a DevSecOps environment.
• Demonstrated experience leading or supporting enterprise-level cybersecurity efforts, including architecture, design, development, and configuration of cloud and on-premises systems and software.
• Experience implementing and maintaining security controls; providing security guidance, oversight, and expertise; and developing security documentation supporting an Authority to Operate.
• Demonstrated experience supporting system Assessment and Authorization activities.

Benefits

• Opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world.
• From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers.