Security and Privacy Compliance Lead (Policy)

Who is Malama Kai Technologies? 

Malama Kai Technologies (MKT) is an SBA-certified 8(a) Native Hawaiian Organization (NHO) providing mission-driven engineering, technology, and professional services in support of the U.S. Government. 

Headquartered in Maui, Hawaiʻi, and Herndon, Virginia, MKT was founded to deliver high-quality, dependable solutions while creating long-term economic opportunities for the Native Hawaiian community. Our work spans complex, regulated environments where reliability, security, and accountability are essential, including defense, intelligence, and federal civilian missions. 

Position Location: Alexandria VA, Hybrid (10% On Site) 

Who are you? 

Security-cleared Professional: You are able to obtain and maintain a government issued public trust clearance. 

Education is important to us: A Bachelor’s Degree or an Associate’s degree in a related field is preferred with 7-10 years of experience.  

Experience is important to us: Technical knowledge of cloud service analysis, FedRAMP compliance, security assessment and monitoring, assessment and authorization, privacy and training. 

Certifications: Either a Security + CE, CASP, CISSP, GCIA, CISM, CISA or another certification that is the equivalent. 

Core Responsibilities: 

Provide technical knowledge and management of cybersecurity policy analysts.  

Manage the review and development of policies, procedures, directives, regulations, and deliverables instructed by federal client.  

Develop systems security contingency plans and disaster recovery procedures.  

Provide guidance and support to improve processes and team effectiveness.  

Preferred Experience 

Extensive experience in managing and leading teams of cybersecurity policy analysts, including assigning tasks, reviewing deliverables, and ensuring alignment with organizational goals. 

Advanced knowledge of FedRAMP compliance requirements, including the ability to conduct security assessments, prepare authorization packages, and monitor cloud service providers for compliance. 

Proficiency in developing and maintaining privacy impact assessments (PIAs) and privacy threshold assessments (PTAs) to ensure compliance with privacy regulations. 

Strong understanding of NIST Risk Management Framework (RMF) and its application to security assessment and authorization processes. 

Experience in drafting and updating comprehensive policies, procedures, and directives to align with federal cybersecurity and privacy standards. 

Expertise in creating and testing system security contingency plans and disaster recovery procedures, including conducting tabletop exercises and full-scale recovery tests. 

Familiarity with training program development, including creating role-based training modules and delivering privacy and security awareness training. 

Strong analytical skills to evaluate new technologies, programs, and contracts for potential security and privacy impacts and recommend mitigation strategies. 

Experience in coordinating with cross-functional teams and stakeholders to ensure consistent implementation of security and privacy policies across the organization. 

Strong communication and leadership skills to provide guidance, improve team processes, and effectively present recommendations to senior management and stakeholders. 

Benefits and Compensation:  

Malama Kai Technologies offers competitive compensation packages commensurate with experience, contract requirements, and role responsibilities. Benefits eligibility and offerings will be discussed during the hiring process.  

Malama Kai Technologies, LLC is an Equal Opportunity Employer. We respect and seek to empower each individual and support the diverse cultures, perspectives, skills, and experiences within our workforce. Qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.