Information Systems Security Manager (ISSM)

About the role

This specialty covers cyber security, information assurance, and compliance design, integration, implementation, modification, and coordination of the installation, testing, operation, and disposition of hardware and software systems. Functions include coordinating with industry partners on their digital infrastructure and serving as the liaison between industry, the Program Security Office, and the Approving Official.

Responsibilities

• Review specifications, documentation, and monitor the availability, serviceability, and recoverability of installed technology security systems.
• Review cyber security procedures and tools, systems configuration, and the installation and integration of system patches, updates, and enhancements.
• Ensure the rigorous application of information security/information assurance policies, principles, and practices.
• Evaluate risk assessments and provide recommendations for system, network, and application design, implementation, and operation of enterprise-wide systems.
• Evaluate vulnerability assessments of enterprise-wide or complex systems and networks to identify deviations from acceptable configurations or policies.
• Monitor the corrective actions of enterprise-wide system audits.
• Review companies' Plan of Action and Milestones (POAM).
• Meet with stakeholders regularly to assess needs and requirements.
• Support certification and accreditation through coordinating documentation.
• Evaluate the establishment of program control processes to ensure risk mitigation.
• Review periodic audits of systems.
• Evaluate implementation of required policies, procedures, and configurations.
• Apply project management principles and methods to the leadership of security tasks or projects.
• Coordinate communications regarding policies, procedures, and best practices for vulnerability and risk assessments.

Requirements

• 10+ years of related experience (Senior level).
• Bachelor’s Degree or higher (Senior level).
• IAM level 2 certification: CISSP, CASP CE+, CGRC, or CISM.
• Ability to obtain and maintain a US government security clearance.
• U.S. Citizenship is required for this position.