Information System Security Manager (ISSM)

Information System Security Manager (ISSM)

Company Overview :

KODA is a people-first company recognized as a five-time winner of Huntsville's Best Places to Work® Award, certified as a Great Place to Work®, and a Best Place for Working Parents®.

KODA is a small business focused on solving complex engineering problems on national-priority projects in domains such as missile defense, hypersonics, DOD space, and civil space.

Our expertise spans Radar and Missile Development, Multi-Domain Operations, Flight and Ground Test Planning and Execution, Tactical Data Link Testing, Test Range Instrumentation, Systems Engineering and Integration, Model and Simulation Development, and Digital Engineering / Model-Based Systems Engineering.

The name KODA, a Native American word meaning 'allies', embodies our dedication to our customers and each other. Trust and integrity guide us in all we do.

We prioritize our people, support national-priority missions, and give back to our community through the KODA Cares program.

We offer competitive compensation, excellent benefits, and a commitment to professional growth. Join us and learn more at .

Position Overview :

KODA Technologies Inc. is seeking a full-time Information System Security Manager (ISSM) to oversee the Assessment and Authorization (A&A) of KODA's Information Systems (IS) in accordance with KODA's current Risk Management Framework (RMF) processes.

The successful candidate will manage ongoing authorizations and assist in developing enhanced capabilities.

Duties / Responsibilities :

• Oversee the Assessment & Authorization (A&A) of current and future Information Systems (IS) in accordance with Risk Management Framework (RMF) process, working directly with Defense Counterintelligence & Security Agency (DCSA) Authorizing Official (AO) to develop the required strategy and deliverables to accomplish KODA's missions.
• Support KODA's RMF Configuration Control Board (CCB) as the required POC for IS-related actions.
• Maintain KODA's Continuous Monitoring (ConMon) Plan to maintain system accreditation compliance.
• Work collaboratively with System Administrators to conduct Cyber Security (CS) Risk Analysis Reports (RAR) to develop mitigation, remediation, and monitoring strategies in compliance with National Industrial Security Program Operating Manual (NISPOM, 32 CFR, Part 117) and DCSA Assessment and Authorization Process Manual (DAAPM).
• Perform all activities associated with obtaining and maintaining RMF Authorities to Operate (ATO) for systems within KODA's area of responsibility.
• Manage and report DCSA required RMF efforts to DCSA Information Systems Security Professional (ISSP) and Security Control Assessor (SCA).
• Provide recommendations to the Senior Information Systems Officer (SISO), associated project Team Leads, and Facility Security Officer (FSO) for process enhancements for DCSA-accredited IS.
• Assist the SISO and FSO in the effective implementation, assessment, and management of the KODA Security Program.
• Support KODA's oversight and performance of other corporate computing efforts as needed, including monitoring of Help Desk ticket status, new hire IT onboarding, system administration, and inventory of KODA and government-furnished property.

Requirements :

• Two-year or Four-year degree in Computer Engineering, Computer Science, or Information Systems Security / Assurance.
• 4+ years of ISSO experience or 2+ years of ISSM experience.
• 4+ years of Microsoft operating systems administration experience.
• 2+ years of experience with Assessment & Authorization (A&A) responsibilities, including ISSO, ISSM, policy development, control testing, POA&M management, and configuration management.
• Experience with working with DoD tools, including Enterprise Mission Assurance Support Service (eMASS), SCAP, DISA STIGs and other monitoring tools.
• Experience with performing cybersecurity compliance standards, including NIST Controls and DISA STIGS.
• Experience with Systems Administration, Information Systems Auditing, Data Security Analysis and / or Network Administration.
• Experience with Microsoft Office products.
• Strong organizational, analytical, and problem-solving skills.
• Solid communication skills, both in written, verbal, and interpersonal skills.
• Ability to develop and maintain effective working relationships across the organization.
• Willingness to jump in and support various diverse IT-related tasks when needed within a small company .

Clearance :

Active Secret Clearance

KODA Technologies Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, gender identity, sexual orientation, pregnancy, status as a parent, national origin, disability (physical or mental), family medical history or genetic information, political affiliation, military service, or other non-merit based factors.

If you are unable to complete this application due to a disability, contact to ask for an accommodation or an alternative application process.

Job Posted by ApplicantPro