Senior Information Systems Security Officer

Senior Information Systems Security Officer

KSAT Inc. 7600 E Eastman Ave Suite 415 Denver Colorado 80231

Introduction

With headquarters in Tromsø Norway Kongsberg Satellite Services AS (KSAT) supplies ground station services for satellite communications. KSAT is the worlds largest supplier of telemetry tracking and command (TT&C) and data acquisition services for non-geostationary satellites.

Founded in 1968 KSAT has grown to over 600 employees with about 50% of KSATs annual revenue coming from the US. The wholly owned subsidiary KSAT Inc. (aka. KSAT USA) is located in Denver Colorado and is rapidly growing in response to strong US Government and industry demand for commercial ground segment services. As a result of KSATs continued growth in the US more critical talent is needed.

Position Summary

KSAT USA is seeking an experienced Information Systems Security Officer (ISSO) to serve as the primary cybersecurity and compliance lead for U.S.-based information systems supporting government and commercial space operations. This position will be responsible for the security posture regulatory compliance risk management activities and cybersecurity operations oversight of KSATs segregated U.S. environments including cloud-hosted and on-premises systems handling Controlled Unclassified Information (CUI) and other sensitive data.

The ISSO will serve as the principal U.S. point of contact for cybersecurity matters and will work closely with KSATs Chief Information Security Officer (CISO) located in Norway to ensure alignment between corporate security policies and U.S. Government cybersecurity requirements. This role will lead implementation and verification of NIST 800-53 security controls support Authority to Operate (ATO) activities coordinate audits and assessments manage system compliance documentation and guide cybersecurity activities across engineering operations and business functions.

The successful candidate will possess extensive experience in cybersecurity governance risk management compliance security operations cloud security and system accreditation processes. Experience supporting aerospace satellite communications or government mission systems is highly desirable.

This position will report to the US Director of Engineering in close coordination with the CISO.

The role will be local to the Denver region with flexible teleworking opportunities. Relocation assistance is available for the right candidate.

Joining the KSAT Team means:

• Opportunity to work across the commercial civil and defense space industry
• Flexible work environment
• Experience in an international company with a global footprint and opportunities to work across cultures
• Engaging team: inspire small dedicated A-class teammates. Being part of a nimble and passionate start-up team with the financial security and product technology readiness level of an established company the best of both worlds

Compensation

The On-Target base salary range is $135K-$165K annually.

Benefits Package Highlights:

• Four weeks of PTO annually
• $0 individual medical insurance with generous coverages
• Flexible working environment
• Fitness expense reimbursement program
• Tuition reimbursement program
• International travel opportunities

Details of the Role

Essential Job Duties and Responsibilities:

• Serve as the designated Information Systems Security Officer (ISSO) for KSATs U.S.-based information systems and regulated environments.
• Lead implementation assessment and continuous monitoring of NIST 800-53 security controls.
• Maintain the cybersecurity posture of systems supporting government defense and commercial space customers.
• Develop maintain and continuously improve system security policies procedures standards and operational guidance.
• Act as the primary interface for cybersecurity audits assessments inspections and customer security reviews.
• Support development and maintenance of System Security Plans (SSPs) POA&Ms security assessments policies and other compliance documentation.
• Lead cybersecurity activities associated with system authorization and Authority to Operate (ATO) processes.
• Track and manage cybersecurity risks vulnerabilities findings and remediation efforts.
• Coordinate cybersecurity monitoring activities across cloud and on-premises environments.
• Review security events alerts vulnerabilities and threat intelligence reporting to identify potential impacts to KSAT systems.
• Collaborate with software cloud and network engineering teams to implement secure architectures and operational processes.
• Serve as the primary cybersecurity advisor to KSAT USA leadership.
• Coordinate cybersecurity activities with the Norway-based CISO and international security teams.

Requirements

US Citizenship; Eligibility to maintain a US DoD SECRET Clearance

Qualifications and Skills

• Minimum 10 years of experience in cybersecurity information assurance information systems security or related technical disciplines.
• Minimum 5 years supporting regulated U.S. Government systems or environments subject to cybersecurity compliance requirements.
• Demonstrated experience implementing and assessing NIST SP 800-53 security controls.
• Experience supporting Authority to Operate (ATO) RMF or comparable accreditation processes.
• Experience developing and maintaining cybersecurity documentation including:
  • System Security Plans (SSPs)
  • POA&Ms
  • Security Policies and Procedures
  • Risk Assessments
  • Continuous Monitoring Documentation
• Experience supporting environments containing Controlled Unclassified Information (CUI).
• Strong understanding of:
  • NIST Risk Management Framework (RMF)
  • NIST 800-53
  • NIST 800-171
  • CMMC
  • Incident Response
  • Vulnerability Management
  • Continuous Monitoring
• Experience working with both cloud-hosted and on-premises systems.
• Strong understanding of enterprise networking principles network segmentation access control and secure system design.
• Experience collaborating with engineering teams to implement and validate cybersecurity requirements.

Preferred Qualifications and Skills

• Experience supporting DoD NASA NOAA Intelligence Community or other U.S. Government programs.
• Experience with:
  • Azure Government
  • Microsoft Azure
  • AWS GovCloud
  • OpenStack-based environments
  • Kubernetes platforms
• Experience supporting environments operating under FedRAMP RMF or equivalent government compliance frameworks.
• Familiarity with Security Information and Event Management (SIEM) platforms vulnerability scanners endpoint protection platforms and cloud security tooling.
• Experience reviewing network and cloud architectures from a cybersecurity perspective.
• Understanding of secure software development lifecycle (SSDLC) principles and DevSecOps practices.

Travel

• Travel is estimated at 10%
• Travel will be necessary to Tromsø Norway several times per year
• Travel may be necessary to customer sites in the United States

Education

Bachelors degree in Cybersecurity Information Security Computer Science Information Systems Engineering or related technical discipline.

Equivalent combinations of professional experience cybersecurity certifications and demonstrated expertise may be considered in lieu of a formal degree.