Information Systems Security Manager

We need to output HTML fragment with sections: headings

for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections if posting has real specific content. We must not repeat job title as heading. No Job ID/requisition numbers as headings; can fold minor metadata into short

or drop it. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. We need to preserve all substantive information. Let's parse the posting. First paragraph: "The Security Services Department’s overall mission is to identify and counter security threats to the MIT Lincoln Laboratory’s mission of development of game-changing technology in support of National Security, including guarding against compromise by foreign intelligence agencies and insider threats. To accomplish this mission, this department formulates and implements policies, plans, and actions designed to protect facilities against threats of vandalism, accidental destruction, and sabotage; and safeguards personnel, classified and unclassified information systems, personal identifiable information, property, and other assets from exploitation and recruitment by foreign intelligence agencies. We foster a culture where security professionals are empowered to solve complex security problems in close collaboration with Laboratory research teams and Government counterparts. Our people are our most important resource, and we encourage a casual and flexible opportunity-filled working environment that is technology-focused. Where mission needs can be met, the Security Services Department encourages flexible schedules and hybrid remote work arrangements." Then "Who are we? MIT Lincoln Laboratory is a Federally Funded Research and Development Center (FFRDC) whose mission is research in support of National Security. Mission - The Security Services Department’s (SSD) overall mission is to identify and counter security threats to the MIT Lincoln Laboratory’s mission of development of game-changing technology in support of national security, including guarding against compromise by foreign intelligence agencies and insider threats.Culture – We foster an inclusive, opportunity-filled environment of empowered team members from diverse backgrounds." Then "What will you do?" list of responsibilities. Then "What Will You Do (con't)" more responsibilities. Then "How will you grow?" growth opportunities. Then "What you need:" requirements. Then "Ideally you will have:" preferred qualifications. Then "Benefits MIT Lincoln Laboratory offers a plethora of benefits for its employees: matching 401k, pension, flexible/hybrid working options, leave (parental, military, etc.), health, dental, vision, pet insurance, tuition reimbursement and continuing studies programs, mentorship networks, and more." Then "As an employee of MIT, you will also receive numerous benefits, discounts and perks." Then "Hiring Range: $114,600 - $151,900" plus disclaimer. Then more benefits repeated. Then "Selected candidate will be subject to a pre-employment background investigation and must be able to obtain and maintain a Secret level DoD security clearance." (Note earlier said Top-Secret clearance required; later says Secret level; we need to preserve both? Actually earlier "The ability to obtain and maintain a Top-Secret clearance." Then later "Selected candidate will be subject to a pre-employment background investigation and must be able to obtain and maintain a Secret level DoD security clearance." Might be contradictory; we keep both statements. Then EEO boilerplate to remove. Then "Requisition ID: 43347" drop or minor metadata. We need sections: About the role (maybe mission description), Responsibilities, Requirements, Qualifications (maybe "Ideally you will have:"), Benefits, Pay (if present), Schedule (if present). Also maybe "How will you grow?" could be under Growth Opportunities but not a standard heading; we could treat as "Growth and Development" but not in list; we should only use headings from list. So we could incorporate growth info into Responsibilities or Requirements? Better to create a section "Growth Opportunities" but not allowed headings list; we must only use those headings. So we should not create a heading not in list. So we need to fit content into allowed headings. The list: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We can put mission description under About the role. Responsibilities under Responsibilities. Requirements under Requirements (basic requirements). Qualifications under Qualifications (preferred). Skills maybe under Skills (but we have technical skills etc). Could combine Skills with Qualifications? But we need to decide. We have "What you need:" includes: ability to obtain Top-Secret clearance, US Citizen, background check, BS degree required, technical experience may substitute, Active knowledge of NISPOM etc, Demonstrated experience with vulnerability scanning, Excellent written/verbal communication skills. That's requirements. "Ideally you will have:" includes: minimum 8 years IT security experience in DoW Industrial Security, leadership skills preferred, DoD 8570.01-M IAM Level II or III baseline certification, ISC2 CISSP preferred, Technical experience securing multiple traditional and virtual systems..., Experience with eMASS, Experience and skills with virtualization, container, and cloud technologies, Prior experience working in collaborative team environment, Prior experience working with classified government networks. That's qualifications/skills. We could put those under Qualifications (preferred) and maybe Skills separate for technical skills. But we can also combine. We have Benefits section: matching 401k, pension, flexible/hybrid working options, leave, health, dental, vision, pet insurance, tuition reimbursement, continuing studies, mentorship networks, plus MIT benefits etc. So we can put Benefits. Pay: Hiring Range: $114,600 - $151,900. So we can include Pay. Schedule: The posting mentions flexible schedules and hybrid remote work arrangements. So we can include Schedule. We need to avoid filler like "commensurate with experience". Not present. We need to remove duplicated lines and boilerplate. We need to output only HTML fragment, no /, no markdown fences. We'll produce something like:

About the role

... mission description ...

Responsibilities

• ... each responsibility ...

Requirements

• ... each requirement ...

Qualifications

• ... each preferred qualification ...

Skills

• ... maybe technical skills ...

But we might double-list. Could combine Qualifications and Skills. However we need to follow instruction: Prefer a few substantive sections over many thin ones. So maybe we combine Requirements and Qualifications into one? But we have separate headings allowed; we could omit Skills if we put technical skills under Qualifications. Let's think. We have many responsibilities; we can list them. We have requirements (basic). We have preferred qualifications (experience, certifications). We have technical skills (specific OS, tools). Could put those under Qualifications as well. Thus we could have sections: About the role, Responsibilities, Requirements, Qualifications, Benefits, Pay, Schedule. That's 7 sections. We need to ensure we don't include empty sections. Now craft content. About the role: combine mission description and who we are. Paragraph: The Security Services Department’s overall mission is to identify and counter security threats to the MIT Lincoln Laboratory’s mission of development of game-changing technology in support of National Security, including guarding against compromise by foreign intelligence agencies and insider threats. The department formulates and implements policies, plans, and actions to protect facilities against vandalism, accidental destruction, and sabotage; safeguards personnel, classified and unclassified information systems, personal identifiable information, property, and other assets from exploitation and recruitment by foreign intelligence agencies. It fosters a culture where security professionals solve complex security problems in collaboration with research teams and government counterparts, encourages a casual, flexible, opportunity-filled, technology-focused work environment, and supports flexible schedules and hybrid remote work where mission needs allow. MIT Lincoln Laboratory is a Federally Funded Research and Development Center (FFRDC) dedicated to research in support of National Security. We need to preserve all substantive info; we can combine. Responsibilities: list each bullet from "What will you do?" and "What Will You Do (con't)". Let's extract: - Be responsible for maintaining the overall system security posture of several MIT Lincoln Laboratory programs, as well as the implementation of the DoW Risk Management Framework (RMF) within assigned areas of responsibility. - Lead and provide direct supervision to assigned Information Systems Security Officers (ISSO). - Ensures work is prioritized consistently with work group and organization goals and objectives. - Oversee the cybersecurity program, to include policies and procedures for assigned areas of responsibility. - Develop and maintain System Security Plans (SSP) and associated artifacts such as the Plan of Action & Milestones (POA&M), Risk Assessment Report, and Continuous Monitoring Strategy. - Conduct security-focused configuration management activities for classified systems and networks in a variety of traditional, virtual, and cloud-based environments. - Ensure system information is protected while operated, maintained, and disposed of in accordance with organization security policies and procedures. - Ensure measures are taken to report, respond, and remediate security incidents and spillages. - Advise system owners of current cybersecurity policies and concepts when designing, procuring, adopting, and developing systems throughout the system life cycle. - Ensure audit records are collected and analyzed in accordance with the SSP. - Lead efforts to conduct network, system, and application vulnerability scanning, configuration assessment, risk assessment, continuous monitoring, and remediation. - Maintain a working knowledge of system functions, security policies, technical security safeguards, and operational security measures. - Implement an effective IS security education, training, and awareness program, to include providing training. - Lead efforts to prepare for and participate in periodic organization compliance assessments. - Provide account management oversight, and ensure related documentation is complete and updated. - Serve as a voting member of the Configuration Control Board (CCB). - Manage the daily workload and operations of ISSOs in area of responsibility. We need to ensure no duplication; looks fine. Requirements (basic): - Ability to obtain and maintain a Top-Secret clearance. - Must be a U.S. Citizen. - Successfully pass a background check. - BS degree in Computer Science, Information Technology, Computer Information Systems, or related discipline is required. - Technical experience and skills, course work completed toward a degree, and industry IT certifications may be considered substitutes for education and DoW security experience. - Active knowledge of NISPOM, DAAPM, DISA Policy STIGs, and NIST RMF is required. - Demonstrated experience with vulnerability scanning and auditing tools and associated administrative processes. - Excellent written and verbal communication skills. Also note later: "Selected candidate will be subject to a pre-employment background investigation and must be able to obtain and maintain a Secret level DoD security clearance." This is somewhat contradictory but we can include both statements; maybe we keep both as separate bullet points: ability to obtain and maintain Top-Secret clearance; also must be able to obtain and maintain Secret level DoD security clearance (though lower). We'll include both. Qualifications (preferred): - Minimum of 8 years of IT security experience in DoW Industrial Security is required, leadership skills relevant to this experience preferred. - Possess a DoD 8570.01-M IAM Level II or III baseline certification, ISC2 CISSP preferred. - Technical experience securing multiple traditional and virtual systems including Windows Server 2016 and 2019, Windows 10, Red Hat Enterprise Linux, Ubuntu, Mac, etc. utilizing DISA STIGs and/or SRGs. - Experience with eMASS. - Experience and skills with virtualization, container, and cloud technologies. - Prior experience working in a collaborative team environment. - Prior experience working with classified government networks. We could also include leadership skills etc. Skills: maybe we could separate technical skills but we already have them in Qualifications. To avoid thin sections, we could omit Skills section and keep Qualifications covering both. But we have a heading Skills allowed; we could put