Information Systems Security Manager (ISSM)

Responsibilities

• Support system/application Assessment and Authorization (A&A) efforts.
• Recommend policies and procedures to ensure the reliability of and accessibility to information systems and to prevent and defend against unauthorized access to systems, networks, and data.
• Conduct risk and vulnerability assessments and inspections of planned and installed information systems.
• Evaluate threats and vulnerabilities to information systems to ascertain the need for additional safeguards.
• Review and provide inputs to modification packages, program/system documents, and support agreements updates.
• Perform security impact analysis on any system change.
• Monitor intelligence and open-source information for vulnerabilities affecting systems.
• Conduct systems security monitoring, evaluations, audits, and reviews.
• Implement systems security contingency plans and disaster recovery procedures.
• Ensure the rigorous application of cybersecurity and cryptographic policies, principles, and practices throughout the system development lifecycle.
• Author, monitor, and record system information in applicable databases.
• Prepare and record system, security status, and portfolio management information into ITIPS for FISMA; SISSU; Clinger Cohen Act; and other statutory compliance.
• Support and assist external teams in evaluating systems cybersecurity posture.
• Support the development, coordination, and implementation of cybersecurity-related special projects and taskers.

Qualifications

• 5+ years experience in cyber security or information assurance.
• Bachelor’s degree in a related field.
• Must hold one of the following certifications: CISSP, CISM, GSLC, or CCISO.
• Significant experience in vulnerability scanning and analysis, including the use of automated tools and vulnerability management systems.
• Knowledge of intrusion prevention and network access control tools/systems.
• Understanding of system audit principles and security risk assessment.
• Strong understanding of security policy advocated by the U.S. Government including the Department of Defense and appropriate civil agencies, e.g., NIST.
• Experience in developing both common user and special purpose command and control/information systems with increasing responsibilities in the scope and magnitude of the systems for which solutions have been implemented.
• Solid understanding of network infrastructure and mission assurance.
• Familiarity with Federal government and DOD standards for IA/security including DIACAP, FISMA, NIST, and OMB.
• Solid communications skills and capability to work with all levels of an organization.
• US Citizen with a current Top Secret clearance.

Pay

The projected compensation range for this position is $175,800-$195,100. There are multiple factors that can impact a final salary, including, but not limited to, Contract Wage Determination, relevant work experience, skills and competencies that align to the specified role, geographic location (if remote or different from the stated location for this position), education and certifications as well as Federal Government Contract Labor categories.

Benefits

In addition to the salary, Abacus Technology offers a benefits package that includes:

• Health and Dental Insurance;
• 401(k) and Matching;
• Life Insurance;
• Short- and Long-Term Disability;
• Paid Time Off;
• Paid Holidays;
• Professional Membership, Technical Training, Certification, and Education Assistance.

Applicants selected will be subject to a U.S. government security investigation and must meet eligibility requirements for access to classified information.

Equal Opportunity Employer/Moderator/Veteran/Disabled.