[Hiring] Information System Security Officer @Chenega Corp

Role Description

We are seeking an Information System Security Officer (ISSO) to support the Department of Health and Human Services, Administration for Community Living, Enterprise IT Services Program. The ISSO maintains system security and privacy documentation, coordinates assessments and authorization activities, tracks risks and remediation, and prepares assigned cybersecurity deliverables.

• Support compliance with FISMA, NIST security controls, RMF, and applicable HHS/ACL requirements.
• Coordinate annual Security Assessment and Authorization activities and annual security control assessments.
• Update system security plans, configuration management plans, and other system documentation annually.
• Prepare or coordinate the Risk Assessment Report and Security Assessment Report.
• Maintain risk and issue records and track remediation owners, milestones, and overdue actions.
• Review vulnerability scans and monitoring results, coordinate remediation with technical teams.
• Maintain contingency planning documentation and coordinate the annual Contingency Plan Test.
• Maintain the ACL Cybersecurity Incident Response Plan and coordinate security incident reporting.
• Develop and support ongoing phishing scenarios, tests, educational materials, and reports.
• Review security aspects of identity and access activities and coordinate security requirements.
• Maintain assigned security documentation in OneDrive and participate in biweekly status meetings.
• Support security knowledge transfer, documentation handover, and transition planning.
• Perform other related duties as assigned.

Qualifications

• Bachelor’s degree in information technology or cybersecurity, or additional experience in lieu of a degree.
• 5+ years of experience in cybersecurity, information assurance, or a related field, preferably within a federal environment.
• Certified Information Systems Security Professional, or equivalent experience and knowledge.
• Public Trust background investigation is required.

Requirements

• 5+ years of experience in security architecture, security assessment, or a related cybersecurity role in a federal or government environment.
• Certified Information Security Manager or Certified Information Systems Auditor.
• Successfully pass background and drug screening.

Benefits

• Opportunities for professional development and skill sharpening.
• Supportive culture that encourages team members to excel.
• Well-being programs to maintain a healthy work-life balance.
• Focus on corporate citizenship and positive social impact.