Overview
SPECIAL ACCESS PROGRAM SECURITY OFFICER (NAUT):
Bowhead seeks a Special Access Program Security Officer to support our customer on the Nautical contract in the Arlington, VA area. This position ensures security management and compliance for security controls for DoD cloud migration projects while coordinating security accreditation activities and maintaining ongoing security posture, training, and other related events in accordance with Government and Bowhead policies.
Responsibilities
Implement and enforce SAP security management per DoD and customer specific standards/regulations/policies
Plan, schedule, and prioritize security activities to accomplish mission objectives
Conduct comprehensive security risk assessments and vulnerability analysis on facilities/processes, addressing impacts
Establish, maintain, and update Security Operating Procedures, Emergency Action Plans, and other applicable procedures
Ensure applicable Security Classification Guides and pertinent classification documentation is available to employees
Proven experience reporting/coordinating security matters, including personnel vetting issues and security incidents, with the Program Security Officer, Contractor Program Manager, Government Program Manager, and company leadership to include coordinating response activities.
Conduct exploration of any loss, compromise, or suspected compromise of classified and/or sensitive information, including conducting preliminary inquiries and generating damage assessments as a result of the loss of classified information
Establish, conduct, and maintain security training and documentation for initial, courier, situational, and annual refresher
Execute the SAP Nomination Process ensuring accuracy and clarity with applicable prescreening questionnaires and conduct applicable reviews of candidates being submitted for SAP access
Have access to and able to understand information found in the Defense Information System for Security (DISS) Web Application or any successor system
Prepare, process, and/or review Program Access Request (PARs) for accuracy and access eligibility
Perform indoctrinations to individuals approved for access to include documentation and updating applicable databases
Establish, update, and conduct debriefings to include documentation, updating applicable databases, and visit requests
Prove experience with and maintain access to the Joint Access Database Environment (JADE), or any successor system, and maintain personnel security files, to include input and reporting requirements
Research, process, file, and maintain inbound and outbound SAP visit notices
Conduct and maintain documentation of annual self-inspection or other compliance inspections and submit corrective action plans to applicable authorities through completion
Establish procedures and be knowledgeable of Intrusion Detection Systems (IDS) and the requirements that go with IDS and alarm response
Establish, update, and ensure access control procedures are in place for the facility and access control badges
Establish, update, and conduct escort procedures, including logging, for cleared and uncleared visitors
Conduct entry and exit inspections
Maintain security containers and facilities to ensure ability to properly safeguard classified information
Establish and maintain an accountability process for Top Secret SAP and media (hard drives, discs) materials
Acquire and maintain destruction procedures/equipment consistent with regulations
Be able to maintain records for and coordinate distribution (including packaging)/receipt of classified information/packages
Interface with facility cybersecurity Information Systems Security Managers and/or Information Systems Security Officers to ensure full protection of all classified materials are met
Basic understanding of Joint SAP Implementation Guide (JSIG) and other cybersecurity requirements
Ensure an Operational Security (OPSEC) plan has been established and communicated to company employees
Provide leadership, mentoring, and oversight of team members
Maintain an extensive customer database point of contact listing
Maintain various daily logs for a variety of administrative functions associated with security management
Handle classified information according to proper procedures and security protocols
Perform other duties as assigned including miscellaneous administrative support functions
Qualifications
Bachelor's degree in Cybersecurity, Information Systems, Information Technology, Computer Science, or related field from an ABET accredited or CAE designated institution or 10 years experience in leiu of this degree.
Minimum of 16+ years of information security experience with demonstrated expertise in cloud security
Minimum of 5+ years of DoD SAP security experience in enterprise environments
Minimum of 3+ years of hands-on experience with cloud security frameworks and implementations
Complete understanding and experience implementing requirements of the NISPOM and ICDs
Knowledge of cloud security principles and FedRAMP requirements
Demonstrated ability to develop solutions to complex security problems
Proven ability to work in fast-paced, deadline-driven environments
Excellent verbal and written communication skills for technical and executive audiences
Recent experience with security management policies and procedures
Proficiency with Microsoft Office Suite and security management tools
CERTIFICATION REQUIREMENTS:
Required: DoD Directive 8570 compliant certification; CompTIA SecurityDesired: Security Fundamentals Professional Certification (SFPC), Special Program Security Credentials (SPSC), other Security Specific SPED Certifications
Physical Demands
Must be able to lift 25 pounds on occasion.
Must be able to stand and walk for prolonged period amounts of time.
Must be able to twist, bend, and squat periodically.
Target salary range is between $175,000 - $200,000 commensurate with experience.
Please note that the salary information is a general guideline only. Bowhead considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/training, key skills, internal peer equity, as well as, market and business considerations when extending an offer.
SECURITY CLEARANCE REQUIREMENTS: Must currently hold a Top Secret security clearance with SCI eligibility and ability to maintain SAP (Special Access Program) eligibility. Due to work requirements, this position will not entertain work from home capabilities. US Citizenship is a requirement for this contract.
LI-KC1
Applicants may be subject to a pre-employment drug & alcohol screening and/or random drug screen, and must follow UIC's Non-DOT Drug & Alcohol Testing Program requirements. If the position requires, an applicant must pass a pre-employment criminal background history check. All post-secondary education listed on the applicant's resume/application may be subject to verification.
Where driving may be required or where a rental car must be obtained for business travel purposes, applicants must have a valid driver license for this position and will be subject to verification. In addition, the applicant must pass an in-house, online, driving course to be authorized to drive for company purposes.
UIC is an equal opportunity employer. Ukpeaġvik Iñupiat Corporation (UIC) considers all applicants for employment without regard to race, color, religion, creed, sex, sexual orientation, gender or gender identity, pregnancy, national origin, age, disability, military/veteran status, marital status, genetic information, or any other legally protected status EOE/D/V. Pursuant to The Alaska Native Claims Settlement Act 43 U.S.C. Sec. 1601 et seq., and subject to other state and federal requirements, UIC and its subsidiaries may legally grant certain preference in employment opportunities to UIC Shareholders and their Descendants. Please view Equal Employment Opportunity posters here .
All candidates must apply online at www.uicalaska.com , and submit a completed application for all positions they wish to be considered. Once the employment application has been completed and submitted, any changes to the application after submission may not be reviewed. Please contact a UIC HR Recruiter if you have made a significant change to your application. In accordance with the Americans with Disabilities Act of 1990 (ADA), persons unable to complete an online application should contact UIC Human Resources for assistance www.uicalaska.com/careers/recruitment/ .
The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35(c)
UIC Government Services (UICGS / Bowhead) provides innovative business solutions to federal and commercial customers in the areas of engineering, maintenance services, information technology, program support, logistics/base support, and procurement. Collectively, the fast-growing Bowhead Family of Companies offers a breadth of services which are performed with a focus on quality results. Headquartered in Springfield, VA, we are a fast-growing, multi-million-dollar company recognized as a top Alaska Native Corporation providing services across the Department of Defense and many federal agencies. Bowhead offers competitive benefits including medical, dental, vision, life insurance, accidental death and dismemberment, short/long-term disability, and 401(k) retirement plans as well as a paid time off programs for eligible full-time employees. Eligible part-time employees are able to participate in the 401(k) retirement plans and state or contract required paid time off programs.
Join our Talent Community!
Join our Talent Community (https://talentconnect.uicalaska.com/government-services/talentcommunity) to receive updates on new opportunities and future events.
Software Powered by ICIMS (https://icims.help/candidate-faq)
ID 2026-26317
Category Cybersecurity/Information Security
Location : Location US-VA-Arlington
Minimum Clearance Required Top Secret/SCI
Travel Requirement N/A
