Information Systems Security Manager II with Security Clearance

About the Role

Amyx is seeking to hire an Information Systems Security Manager-Advanced to support our Cybersecurity Division in the NCE Springfield, VA area. Responsible for the cybersecurity of a program, organization, system, or enclave.

Responsibilities

• Acquire and manage necessary resources, including leadership support, financial resources, and key security personnel, to support IT security goals and objectives and reduce overall organizational risk.
• Advise senior management (e.g., CIO) on risk levels, security posture, and cost/benefit analysis of information security programs, policies, processes, systems, and elements.
• Collect and maintain data for system cybersecurity reporting.
• Communicate the value of IT security throughout the organization and collaborate with stakeholders on continuity of operations programs.
• Ensure security improvement actions are evaluated, validated, and implemented, and coordinate cybersecurity inspections, tests, and reviews.
• Integrate cybersecurity requirements into continuity planning and ensure protection and detection capabilities align with organizational cybersecurity architecture.
• Evaluate and approve development efforts to ensure baseline security safeguards are installed.
• Identify IT security program implications of new technologies and interpret security requirements for new information technologies.
• Lead and align IT security priorities with the security strategy, oversee security budget, staffing, and contracting.
• Manage monitoring of information security data sources and publish Computer Network Defense guidance.
• Oversee information security training and awareness programs and participate in risk assessments during Security Assessment and Authorization processes.
• Provide cybersecurity and supply chain risk management guidance for Continuity of Operations Plans.
• Recommend resource allocations and policy changes, and supervise protective or corrective measures during cybersecurity incidents.
• Track audit findings and ensure mitigation actions are taken, and ensure compliance with policies, guidelines, and regulations.
• Support compliance activities, participate in the acquisition process, and ensure security requirements are addressed in procurements.

Qualifications

• Bachelor's degree or higher from an accredited college or university (preferably in Computer Science, Cybersecurity, Information Technology, Software Engineering, Information Systems, Computer Engineering, Mathematics, or Engineering).
• Clearance: TS/SCI.
• DoD 8140 Certification: CISSP-ISSMP or GSLC.
• Skill in creating policies reflecting system security objectives.
• Skill in determining how a security system should work and its resilience.
• Ability to evaluate supplier and product trustworthiness.
• Ability to detect host and network-based intrusions using intrusion detection technologies.
• Ability to integrate security requirements into the acquisition process and identify critical infrastructure systems without security considerations.

Skills

• Proficiency in Microsoft Office Suites, SharePoint, Nessus, Xacta, ServiceNow, Archer, and Assessment Tools.

Benefits

• Medical, Dental, and Vision Plans (PPO & HSA options available)
• Flexible Spending Accounts (Health Care & Dependent Care FSA)
• Health Savings Account (HSA)
• 401(k) with matching contributions
• Roth Qualified Transportation Expense with matching contributions
• Short Term Disability
• Long Term Disability
• Life and Accidental Death & Dismemberment Insurance
• Wellness Program
• PTO
• 11 Holidays
• Professional Development Reimbursement