ISSO/Control Evaluator – Low

Koniag Data Solutions, LLC, a Koniag Government Services company, is seeking an ISSO/Control Evaluator – Low to support KDS and our government customer in Washington, DC. This position requires the candidate to be able to obtain a Public Trust. We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more. Koniag Data Solutions, a Koniag Government Services company, is seeking a motivated and detail-oriented Junior Information Systems Security Officer (ISSO) / Control Evaluator to support the U.S. Small Business Administration (SBA). The ideal candidate is an early-career information security professional with a foundational understanding of federal information security requirements, security control frameworks, and the NIST Risk Management Framework (RMF). This individual will work under the guidance of senior ISSO and security authorization staff to support the security authorization and continuous monitoring of SBA's information systems, gaining hands-on experience in federal cybersecurity compliance and security control assessment activities. The Junior ISSO/Control Evaluator will support the security authorization and continuous monitoring of SBA's information systems under the direction of mid-level and senior ISSO staff, assisting with security control assessments, security documentation development and maintenance, and day-to-day information security support activities. Principal responsibilities will include but are not limited to: Support senior ISSO staff in fulfilling Information Systems Security Officer responsibilities for assigned SBA information systems, providing day-to-day information security assistance and administrative support to system owners, program teams, and IT staff. Assist in supporting the NIST Risk Management Framework (RMF) lifecycle for assigned systems, including security categorization, security control selection and tailoring reviews, security control implementation documentation, security control assessment support, and continuous monitoring activities under the direction of senior security staff. Assist in the development, maintenance, and updating of security authorization documentation for assigned systems, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), Risk Assessment Reports (RARs), and other ATO package artifacts in accordance with NIST SP 800-53 and SBA security documentation standards. Support the conduct of security control assessments for assigned systems, assisting senior assessors in applying NIST SP 800-53A assessment procedures to evaluate the design, implementation, and operational effectiveness of security controls, and contributing to the documentation of assessment findings in Security Assessment Reports (SARs). Assist in the development and maintenance of POA&M items for assigned systems, supporting the tracking of identified security weaknesses and compliance deficiencies, coordinating with system owners and IT teams on remediation activities, and maintaining accurate and current POA&M records. Support continuous monitoring activities for assigned systems, assisting in the collection, review, and analysis of security control assessment results, vulnerability scan findings, configuration compliance data, and other security-relevant information to support the assessment of ongoing system security posture. Assist in the review and analysis of vulnerability scan results for assigned systems, supporting senior ISSO staff in assessing the severity of identified vulnerabilities, tracking remediation activities, and maintaining accurate vulnerability management records. Support the preparation of security authorization packages for assigned systems, assisting in the compilation and quality review of ATO documentation to ensure completeness, accurac…