Senior Information Systems Security Officer

Ksat Inc; Denver (CO); Hybrid; USD 135.000 - 165.000; Vollzeit

Benefits dieser Stelle

Four weeks PTO

Free medical insurance

Flexible working environment

Fitness expense reimbursement

Tuition reimbursement

International travel opportunities

Zusammenfassung

KSAT Inc. in Denver seeks an experienced Information Systems Security Officer (ISSO) to lead cybersecurity for U.S. government and commercial space environments. You will implement NIST 800-53 controls, coordinate ATO activities, and manage security documentation.

You will work with the CISO and KSAT USA leadership, bridging engineering, operations, and business lines, with relocation assistance available. Remote work options are flexible in a hybrid setup.

Qualifikationen

• Minimum 10 years in cybersecurity or related disciplines.
• Minimum 5 years supporting regulated U.S. government systems.
• Experience implementing and assessing NIST SP 800-53 controls.
• Experience supporting ATO/RMF or similar accreditation processes.
• Experience developing SSPs, POA&Ms, security policies, risk assessments, and continuous monitoring.
• Experience with environments containing Controlled Unclassified Information (CUI).
• Strong knowledge of RMF/NIST 800-53/800-171/CMMC concepts.
• Experience with cloud-hosted and on-prem systems.

Aufgaben

• Serve as the designated ISSO for U.S.-based information systems.
• Lead implementation, assessment, and monitoring of NIST 800-53 controls.
• Maintain cybersecurity posture for government, defense, and commercial space customers.
• Develop and maintain system security policies, procedures, and guidance.
• Act as primary interface for cybersecurity audits and reviews.
• Support SSPs, POA&Ms, and other compliance documentation.
• Lead cybersecurity activities for ATO processes.
• Track cybersecurity risks, vulnerabilities, findings, and remediation.
• Coordinate monitoring across cloud and on-prem environments.
• Review security events and threat intel for KSAT systems.
• Collaborate with engineering teams to implement secure architectures.
• Serve as primary cybersecurity advisor to KSAT USA leadership.
• Coordinate cybersecurity with Norway-based CISO and teams.

Kenntnisse

10+ yrs cybersecurity

NIST SP 800-53

RMF/ATO

SSP/POA&M

CUI/regulations

Cloud & on‑prem security

DevSecOps

Incident Response

Vulnerability management

Regulatory compliance

Ausbildung

Bachelor's degree in related field

Tools

Azure Government

Microsoft Azure

AWS GovCloud

Kubernetes

OpenStack

Jobbeschreibung

Senior Information Systems Security Officer

KSAT Inc. 7600 E Eastman Ave, Suite 415 Denver, Colorado 80231 ksat.no

Introduction

With headquarters in Tromsø, Norway, Kongsberg Satellite Services AS (KSAT) supplies ground station services for satellite communications. KSAT is the world’s largest supplier of telemetry, tracking and command (TT&C) and data acquisition services for non-geostationary satellites.

Founded in 1968, KSAT has grown to over 600 employees with about 50% of KSAT’s annual revenue coming from the US. The wholly owned subsidiary KSAT Inc. (aka. KSAT USA) is located in Denver, Colorado and is rapidly growing in response to strong US Government and industry demand for commercial ground segment services. As a result of KSAT’s continued growth in the US, more critical talent is needed.

Position Summary

KSAT USA is seeking an experienced Information Systems Security Officer (ISSO) to serve as the primary cybersecurity and compliance lead for U.S.-based information systems supporting government and commercial space operations. This position will be responsible for the security posture, regulatory compliance, risk management activities, and cybersecurity operations oversight of KSAT's segregated U.S. environments, including cloud-hosted and on-premises systems handling Controlled Unclassified Information (CUI) and other sensitive data.

The ISSO will serve as the principal U.S. point of contact for cybersecurity matters and will work closely with KSAT's Chief Information Security Officer (CISO) located in Norway to ensure alignment between corporate security policies and U.S. Government cybersecurity requirements. This role will lead implementation and verification of NIST 800-53 security controls, support Authority to Operate (ATO) activities, coordinate audits and assessments, manage system compliance documentation, and guide cybersecurity activities across engineering, operations, and business functions.

The successful candidate will possess extensive experience in cybersecurity governance, risk management, compliance, security operations, cloud security, and system accreditation processes. Experience supporting aerospace, satellite communications, or government mission systems is highly desirable.

This position will report to the US Director of Engineering, in close coordination with the CISO.

The role will be local to the Denver region with flexible teleworking opportunities. Relocation assistance is available for the right candidate.

Joining the KSAT Team means:

• Opportunity to work across the commercial, civil, and defense space industry
• Flexible work environment
• Experience in an international company with a global footprint and opportunities to work across cultures
• Engaging team: inspire small, dedicated, “A-class” teammates. Being part of a nimble and passionate “start-up” team, with the financial security and product technology readiness level of an established company – the best of both worlds

Compensation

The On-Target base salary range is $135K-$165K annually.

Benefits Package Highlights:

• Four weeks of PTO annually
• $0 individual medical insurance with generous coverages
• Flexible working environment
• Fitness expense reimbursement program
• Tuition reimbursement program
• International travel opportunities

Details of the Role

Essential Job Duties and Responsibilities:

• Serve as the designated Information Systems Security Officer (ISSO) for KSAT's U.S.-based information systems and regulated environments.
• Lead implementation, assessment, and continuous monitoring of NIST 800-53 security controls.
• Maintain the cybersecurity posture of systems supporting government, defense, and commercial space customers.
• Develop, maintain, and continuously improve system security policies, procedures, standards, and operational guidance.
• Act as the primary interface for cybersecurity audits, assessments, inspections, and customer security reviews.
• Support development and maintenance of System Security Plans (SSPs), POA&Ms, security assessments, policies, and other compliance documentation.
• Lead cybersecurity activities associated with system authorization and Authority to Operate (ATO) processes.
• Track and manage cybersecurity risks, vulnerabilities, findings, and remediation efforts.
• Coordinate cybersecurity monitoring activities across cloud and on-premises environments.
• Review security events, alerts, vulnerabilities, and threat intelligence reporting to identify potential impacts to KSAT systems.
• Collaborate with software, cloud, and network engineering teams to implement secure architectures and operational processes.
• Serve as the primary cybersecurity advisor to KSAT USA leadership.
• Coordinate cybersecurity activities with the Norway-based CISO and international security teams.

Requirements

US Citizenship; Eligibility to maintain a US DoD SECRET Clearance

Qualifications and Skills

• Minimum 10 years of experience in cybersecurity, information assurance, information systems security, or related technical disciplines.
• Minimum 5 years supporting regulated U.S. Government systems or environments subject to cybersecurity compliance requirements.
• Demonstrated experience implementing and assessing NIST SP 800-53 security controls.
• Experience supporting Authority to Operate (ATO), RMF, or comparable accreditation processes.
• Experience developing and maintaining cybersecurity documentation including:
  • System Security Plans (SSPs)
  • POA&Ms
  • Security Policies and Procedures
  • Risk Assessments
  • Continuous Monitoring Documentation
• Experience supporting environments containing Controlled Unclassified Information (CUI).
• Strong understanding of:
  • NIST Risk Management Framework (RMF)
  • NIST 800-53
  • NIST 800-171
  • CMMC
  • Incident Response
  • Vulnerability Management
  • Continuous Monitoring
• Experience working with both cloud-hosted and on-premises systems.
• Strong understanding of enterprise networking principles, network segmentation, access control, and secure system design.
• Experience collaborating with engineering teams to implement and validate cybersecurity requirements.

Preferred Qualifications and Skills

• Experience supporting DoD, NASA, NOAA, Intelligence Community, or other U.S. Government programs.
• Experience with:
  • Azure Government
  • Microsoft Azure
  • AWS GovCloud
  • OpenStack-based environments
  • Kubernetes platforms
• Experience supporting environments operating under FedRAMP, RMF, or equivalent government compliance frameworks.
• Familiarity with Security Information and Event Management (SIEM) platforms, vulnerability scanners, endpoint protection platforms, and cloud security tooling.
• Experience reviewing network and cloud architectures from a cybersecurity perspective.
• Understanding of secure software development lifecycle (SSDLC) principles and DevSecOps practices.

Travel

• Travel is estimated at 10%
• Travel will be necessary to Tromsø, Norway several times per year
• Travel may be necessary to customer sites in the United States

Education

Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, Engineering, or related technical discipline.

Equivalent combinations of professional experience, cybersecurity certifications, and demonstrated expertise may be considered in lieu of a formal degree.