Information System Security Manager

About the role

FEDITC, LLC is a fast-growing business supporting DoD and other intelligence agencies worldwide. We develop mission-critical national security systems directly supporting the Warfighter, DoD Leadership, and the country. The Information System Security Manager (ISSM) will serve as a technical advisor to designated programs in the Warren, MI area, leading the maintenance of the overall cybersecurity program for assigned systems and platforms. The ISSM is accountable for implementing applicable Federal, DoD, and Component regulations, including DoD Instruction 8510.01 and DoDI 5000.02, and achieving system and platform authorizations to operate (ATO), authority to connect (ATC), and other approvals required for operational use. The role involves continuous monitoring of systems to ensure compliance with cybersecurity policies and coordination with stakeholders to address security issues.

Responsibilities

• Maintain a repository for all organizational or system-level cybersecurity-related documentation.
• Monitor compliance with cybersecurity policy and review the results of such monitoring.
• Ensure cybersecurity inspections, tests, and reviews are synchronized and coordinated with affected parties, including follow-up remediation and mitigation actions.
• Implement IS security measures and procedures, including reporting incidents to the Authorizing Official (AO) and coordinating responses to unauthorized disclosures in accordance with DoD Manual 5200.01, Volume 3 (classified information) or Volume 4 (Controlled Unclassified Information).
• Act as the primary cybersecurity technical advisor to the acquisition program for DoD IS and PIT systems.
• Report cybersecurity-related events or configuration changes that may impact DoD IS and PIT systems' authorization or security posture to the AO and other affected parties.
• Ensure the secure configuration and approval of IT below the system level (e.g., products and IT services) prior to acceptance into or connection to a DoD IS or PIT system.

Requirements

• 3+ years of proven Governance, Risk, and Compliance (GRC) experience or a related role.
• Strong knowledge of security principles, practices, and technologies.
• Experience with security assessment tools and techniques.
• Excellent problem-solving and analytical skills.
• Completion of DoD/Military Training: 531-25B30-C45, J-3B-0440, DAU ISSM Basic Playlist, RMF Implementers Course; or 531-25B40-C46, DAU ISSM Intermediate Playlist, E3AZR1D751 01EE; or 4C-FA26A, M09CHN1, A-531-0009, DAU ISSM Advanced Playlist.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Data Science, Software Engineering, or Information Technology from an ABET-accredited or NCAE-C-designated institution.
• Active Secret Clearance and United States Citizenship are required.
• Must pass a background check and maintain applicable security clearance(s) and certifications as required by FEDITC and its clients.

Qualifications

• One of the following certifications: Security+, CASP+, CISSP, CCSP, CISM, CCISO, CGRC/CAP, CISSP-ISSMP, SSCP, GSEC, GCIA, GCIH, GSLC, GICSP, FITSP-M, Cloud+, GCSA.