Senior Principal Information System Security Officer - Big Data

Position Summary

This role is for an Information System Security Officer with a heavy lean towards data compliance with federal protections around US Persons, PII, and Commercially and Publicly Available Data. This person will need to ensure all cyber security responsibilities within the Program's scope is maintained, including:

• Ensuring compliance with a secure data schema, especially in terms of shipping between classification boundaries and enclaves (i.e. Cross Domain Solutions).
• Writing and ensuring compliance of data policy and security with the Chief Data Officer of the COCOM.
• Ensuring Cloud Infrastructure within the program's purview is appropriately secure and follows all necessary ATO and security policies.
• Ensuring Platform Infrastructure within the program's purview is appropriately secure and follows all necessary ATO and security policies.
• Ensuring Application Code and Infrastructure within the program's purview is appropriately secure and follows all necessary ATO and security policies.

Role Expectations 

• Data Security & Governance (PII, CUI, CAI/PAI, data classification, lifecycle, retention)
• Encryption & Key Management (data at rest/in transit, KMS/HSM, secrets management)
• Vulnerability & Compliance Management (STIGs, ACAS/Tenable, CVEs, POA&M remediation)
• Security Policy Development & Risk Management (OPSEC, governance, risk assessments, technical documentation)
• RMF, ATO, and eMASS (NIST 800-53, SSPs, POA&Ms, Continuous Monitoring)

Nice-To-Haves 

• Cloud & Kubernetes Security (AWS GovCloud, containers, Kubernetes, network security)
• Identity & Access Management (RBAC, ABAC, Zero Trust, PKI, MFA)
• Security Architecture & Data Platforms (ETL, APIs, data lakes, secure data pipelines, cross-domain data sharing)