Information System Security Officer

Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employer’s core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level!

Securi Gence delivers essential technology services that support our customers missions. We are seeking an Information System Security Officer to support the Department of Health and Human Services, Administration for Community Living, Enterprise IT Services Program.

Reporting to the Program Manager, the ISSO maintains system security and privacy documentation, coordinates assessments and authorization activities, tracks risks and remediation, and prepares assigned cybersecurity deliverables. The ISSO works with system owners, technical teams, assessors, privacy personnel, and government security officials to support FISMA compliance and the NIST Risk Management Framework. Government officials retain authorization and risk acceptance decisions.

• Security governance and posture Support compliance with FISMA, NIST security controls, RMF, and applicable HHS/ACL requirements. Prepare or coordinate the Technical Cybersecurity Posture Report and Cyber Security Playbook on the agreed schedule; support quarterly and annual FISMA reporting as required.

• Assessment and authorization Coordinate annual Security Assessment and Authorization activities and annual security control assessments under mutually agreed assessment schedules. Compile evidence, support assessors, track findings, and submit packages for government review and authorization decisions.

• Security documentation Update system security plans, configuration management plans, contingency plans, privacy impact assessments/privacy needs assessments, control assessment plans, and other system documentation annually. Coordinate annual updates to ACL Information Security and Privacy Policy and prepare security impact assessments as required.

• Assessment reporting Prepare or coordinate the Risk Assessment Report, Security Assessment Report and memorandum, and support materials within two weeks after completion of a Security Control Assessment. Ensure findings are traceable to evidence, affected systems, and corrective actions.

• Risk and remediation Maintain risk and issue records and track remediation owners, milestones, evidence, and overdue actions. Prepare the monthly Plan of Action and Milestones Report; support deviation waiver risk documentation as needed and the Risk Review and Accepted Risk Review Schedules when established. Route risk acceptance decisions to authorized government officials.

• Continuous monitoring and vulnerabilities Review vulnerability scans and monitoring results, coordinate remediation with technical teams, verify corrective action evidence, and prepare monthly vulnerability reports in the required format. Support the ACL Cybersecurity Gap Analysis Report, Unsupported Software Lifecycle Report, and Continuous Diagnostics and Mitigation Strategy on schedules to be determined.

• Contingency planning Maintain contingency planning documentation, coordinate the annual Contingency Plan Test, document results and corrective actions, and track follow-through with system owners and operations teams.

• Incident response Maintain the ACL Cybersecurity Incident Response Plan on an ongoing basis. Coordinate security incident reporting, response documentation, communications, exercises, and lessons learned with designated…