Information Systems Security Manager (ISSM) II
General Dynamics Information Technology · Bedford, MA · 1 mo ago
Information Technology$120k–$162k/yrFull-time
We need to output HTML fragment with sections: headings for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections if posting has real specific content.
We need to parse the job description.
Key info:
- Title: Information Systems Security Manager (ISSM) II (but we must not repeat job title as heading). So we don't output heading for title.
- Location: Bedford, MA (plus additional locations). Could be part of About the role? Probably location details go in About the role or maybe a short paragraph.
- Clearance: Must Currently Possess: Top Secret/SCI; Must Be Able To Obtain: Top Secret SCI + Polygraph; Public Trust/Other Required: None. Also Security Clearance: Required - Active/Current TS/SCI; Must be able to obtain CI Poly.
- US Citizenship Required: Yes.
- Experience: 7+ years related experience; Prior performance in roles such as ISSO or ISSM; SAP experience required.
- Education: Bachelor’s degree in related discipline OR Associate’s degree in a related area + 2 years’ experience OR equivalent experience (4 years).
- Certifications: IAT Level 3 (CISSP, CASP+ CE, CCNP Security, CISA, etc.) or IAM Level 3.
- Skills: maybe listed under Skills: Job Qualifications: Information Security, Information Security Management, Information System Security. Also maybe "Skills" section.
- Responsibilities: The long list under "Performance Shall Include:" and subsequent bullet-like sentences. Those are duties.
- Benefits: "Total Rewards At GDIT: Our benefits package..." includes medical, dental, vision, 401(k), flex work weeks, PTO, disability, life, etc. Also identity verification process? That's not benefit. So we can extract benefits.
- Pay: "The likely salary range for this position is $119,680 - $161,920." Also note not guarantee. So we have pay info.
- Schedule: "Scheduled Weekly Hours: 40". Also "Telecommuting Options: Onsite Work Location". Travel Required: None. So schedule info: 40 hours/week, onsite, no travel.
We need to avoid boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions. Remove EEO etc. At end there is "Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans" - remove.
Also remove "About Our Work:" paragraph? That's maybe boilerplate but could be considered about the company. The instruction: remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. "About Our Work:" is not exactly those but could be considered company description; maybe we can keep as part of About the role? However they said prefer few substantive sections over many thin ones. We could include an "About the role" section that includes location, mission, etc. The "About Our Work:" is generic company description; might be considered boilerplate? Not sure. Safer to omit it, as it's not specific to the role. The instruction: "Preserve ALL substantive information; do NOT invent or summarize away detail." The "About Our Work:" is substantive about the company but not role-specific. Might be considered boilerplate? It's not navigation/legal/EEO. Might be okay to keep but could be considered fluff. I'd lean to include a brief "About the role" paragraph that includes location and maybe the company description? But they said "Prefer a few substantive sections over many thin ones." So we could have sections: About the role (location, clearance, citizenship), Responsibilities (the long list), Requirements (experience, education, certifications, skills), Benefits, Pay, Schedule.
We need to not repeat job title as heading. So we can start with
for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections if posting has real specific content.
We need to parse the job description.
Key info:
- Title: Information Systems Security Manager (ISSM) II (but we must not repeat job title as heading). So we don't output heading for title.
- Location: Bedford, MA (plus additional locations). Could be part of About the role? Probably location details go in About the role or maybe a short paragraph.
- Clearance: Must Currently Possess: Top Secret/SCI; Must Be Able To Obtain: Top Secret SCI + Polygraph; Public Trust/Other Required: None. Also Security Clearance: Required - Active/Current TS/SCI; Must be able to obtain CI Poly.
- US Citizenship Required: Yes.
- Experience: 7+ years related experience; Prior performance in roles such as ISSO or ISSM; SAP experience required.
- Education: Bachelor’s degree in related discipline OR Associate’s degree in a related area + 2 years’ experience OR equivalent experience (4 years).
- Certifications: IAT Level 3 (CISSP, CASP+ CE, CCNP Security, CISA, etc.) or IAM Level 3.
- Skills: maybe listed under Skills: Job Qualifications: Information Security, Information Security Management, Information System Security. Also maybe "Skills" section.
- Responsibilities: The long list under "Performance Shall Include:" and subsequent bullet-like sentences. Those are duties.
- Benefits: "Total Rewards At GDIT: Our benefits package..." includes medical, dental, vision, 401(k), flex work weeks, PTO, disability, life, etc. Also identity verification process? That's not benefit. So we can extract benefits.
- Pay: "The likely salary range for this position is $119,680 - $161,920." Also note not guarantee. So we have pay info.
- Schedule: "Scheduled Weekly Hours: 40". Also "Telecommuting Options: Onsite Work Location". Travel Required: None. So schedule info: 40 hours/week, onsite, no travel.
We need to avoid boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions. Remove EEO etc. At end there is "Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans" - remove.
Also remove "About Our Work:" paragraph? That's maybe boilerplate but could be considered about the company. The instruction: remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. "About Our Work:" is not exactly those but could be considered company description; maybe we can keep as part of About the role? However they said prefer few substantive sections over many thin ones. We could include an "About the role" section that includes location, mission, etc. The "About Our Work:" is generic company description; might be considered boilerplate? Not sure. Safer to omit it, as it's not specific to the role. The instruction: "Preserve ALL substantive information; do NOT invent or summarize away detail." The "About Our Work:" is substantive about the company but not role-specific. Might be considered boilerplate? It's not navigation/legal/EEO. Might be okay to keep but could be considered fluff. I'd lean to include a brief "About the role" paragraph that includes location and maybe the company description? But they said "Prefer a few substantive sections over many thin ones." So we could have sections: About the role (location, clearance, citizenship), Responsibilities (the long list), Requirements (experience, education, certifications, skills), Benefits, Pay, Schedule.
We need to not repeat job title as heading. So we can start with About the role
then a paragraph.
Let's craft.
About the role paragraph: Include location (Bedford, MA, plus additional locations), clearance requirements (Top Secret/SCI, ability to obtain TS/SCI + Polygraph), US citizenship required.
Maybe also mention job family: Cyber and IT Risk Management.
We'll include that.
Responsibilities: Use - for each duty. Need to extract each duty from the "Performance Shall Include:" list and subsequent sentences. Let's list them:
- Perform oversight of the development, implementation and evaluation of information system security program policy; special emphasis placed upon integration of existing SAP network infrastructures.
- Develop and oversee operational information systems security implementation policy and guidelines of network security, based upon the Risk Management Framework (RMF) with emphasize on Joint.Special Access Program Implementation Guide (JSIG) authorization process.
- Advise customer on Risk Management Framework (RMF) assessment and authorization issues.
- Perform risk assessments and make recommendations to DoD agency customers.
- Advise government program managers on security testing methodologies and processes.
- Evaluate authorization documentation and provide written recommendations for authorization to government PMs.
- Develop and maintain a formal Information Systems Security Program.
- Ensure that all IAOs, network administrators, and other cyber security personnel receive the necessary technical and security training to carry out their duties.
- Develop, review, endorse, and recommend action by the AO or DAO of system assessment documentation.
- Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media.
- Develop and execute security assessment plans that include verification that the features and assurances required for each protection level functioning.
- Maintain a and/or applicable repository for all system authorization documentation and modifications. (This sentence seems garbled: "Maintain a and/or applicable repository". Likely means maintain a repository. We'll keep as is.)
- Institute and implement a Configuration Control Board (CCB) charter.
- Develop policies and procedures for responding to security incidents, to include investigating and reporting security violations and incidents.
- Ensure proper protection or corrective measures have been taken when an incident or vulnerability has been discovered within a system.
- Ensure that data ownership and responsibilities are established for each authorization boundary, to include accountability, access rights, and special handling requirements.
- Ensure development and implementation of an information security education, training, and awareness program, to include attending, monitoring, and presenting local cyber security training.
- Evaluate threats and vulnerabilities to ascertain whether additional safeguards are needed.
- Assess changes in the system, its environment, and operational needs that could affect the authorization.
- Ensure that authorization is accomplished a valid Authorization determination has been given for all authorization boundaries under your purview.
- Review AIS assessment plans.
- Coordinate with PSO or cognizant security official on approval of external information systems (e.g., guest systems, interconnected system with another organization)
- Conduct periodic assessments of the security posture of the authorization boundaries.
- Ensure configuration management (CM) for security-relevant changes to software, hardware, and firmware and that they are properly documented.
- Ensure periodic testing is conducted to evaluate the security posture of IS by employing various intrusion/attack detection and monitoring tools (shared responsibility with ISSOs)
- Ensure that system recovery and reconstitution processes developed and monitored to ensure that the authorization boundary can be recovered based on its availability level determination.
- Ensure all authorization documentation is current and accessible to properly authorized individuals.
- Ensure that system security requirements are addressed during all phases of the system life cycle.
- Develop Assured File Transfers (AFT) on accordance with the JSIG.
- Participate in self-inspections.
- Conduct the duties of the Information System Security Officer (ISSO) if one is not present and/or available.
We need to ensure each is a
- . Some sentences are long; we can keep as is.
Requirements: Could include experience, education, certifications, skills, clearance, citizenship. But we already have clearance in About the role. Might be better to have a Requirements section covering experience, education, certifications, skills. However we also have Skills section maybe separate. But we can combine.
Given instruction: prefer few substantive sections over many thin ones. So maybe we have About the role, Responsibilities, Requirements (includes experience, education, certifications, skills), Benefits, Pay, Schedule.
Let's extract:
Experience: 7+ years related experience. Prior performance in roles such as ISSO or ISSM. SAP experience required.
Education: Bachelor’s degree in related discipline OR Associate’s degree in a related area + 2 years’ experience OR equivalent experience (4 years).
Certifications: IAT Level 3 (CISSP, CASP+ CE, CCNP Security, CISA, etc.) or IAM Level 3.
Skills: maybe list: Information Security, Information Security Management, Information System Security. Also maybe "Job Qualifications: Information Security, Information Security Management, Information System Security". We'll treat as skills.
We'll put these in Requirements section as a
- each.
Benefits: from Total Rewards At GDIT paragraph. Let's extract:
- variety of medical plan options, some with Health Savings Accounts
- dental plan options
- vision plan
- 401(k) plan offering ability to contribute both pre and post-tax dollars up to IRS annual limits and receive a company match
- full flex work weeks where possible
- variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave
- short and long-term disability benefits
- life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance
Also identity verification process is not benefit.
We'll put those as
- .
Pay: salary range $119,680 - $161,920. Also note not guarantee. We'll include that as
.
Schedule: Scheduled Weekly Hours: 40; Travel Required: None; Telecommuting Options: Onsite Work Location. So we can say: 40 hours per week, onsite, no travel.
We'll put as
.
Now ensure we don't include headings with empty content. All sections have content.
We must not include markdown code fences. Output only HTML fragment.
Let's craft.
We'll start with
About the role
then ...
Then Responsibilities
...
Then Requirements
...
Then Benefits
...
Then Pay
...
Then Schedule
...
Make sure to close tags.
Now write the content.
About the role paragraph: Include location, job family, clearance, citizenship.
"Location: Bedford, MA (with additional work locations in Avon, Boston, Braintree, Burlington, Cambridge, Fort Devens, Hanscom AFB, Norwood, Peabody, Quincy, Tauntham, Waltham, Westwood, MA). Job Family: Cyber and IT Risk Management. Must currently possess an active Top Secret/SCI clearance and be able to obtain a Top Secret SCI clearance with polygraph. U.S. citizenship is required."
We need to list additional locations exactly as given: "USA MA Avon, USA MA Boston, USA MA Braintree, USA MA Burlington, USA MA Cambridge, USA MA Fort Devens, USA MA Hanscom AFB, USA MA Norwood, USA MA Peabody, USA MA Quincy, USA MA Taunton, USA MA Waltham, USA MA Westwood". We'll incorporate.
Now Responsibilities list: We'll copy each bullet as - . Ensure proper punctuation.
Requirements list: We'll have items:
- 7+ years of related experience; prior performance in roles such as ISSO or ISSM; SAP experience required.
- Education: Bachelor’s degree in a related discipline OR Associate’s degree in a related area + 2 years’ experience OR equivalent experience (4 years).
- Certifications: IAT Level 3 (CISSP, CASP+ CE, CCNP Security, CISA, etc.) or IAM Level 3.
-
- each. Benefits: from Total Rewards At GDIT paragraph. Let's extract: - variety of medical plan options, some with Health Savings Accounts - dental plan options - vision plan - 401(k) plan offering ability to contribute both pre and post-tax dollars up to IRS annual limits and receive a company match - full flex work weeks where possible - variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave - short and long-term disability benefits - life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance Also identity verification process is not benefit. We'll put those as
- .
Pay: salary range $119,680 - $161,920. Also note not guarantee. We'll include that as
. Schedule: Scheduled Weekly Hours: 40; Travel Required: None; Telecommuting Options: Onsite Work Location. So we can say: 40 hours per week, onsite, no travel. We'll put as
. Now ensure we don't include headings with empty content. All sections have content. We must not include markdown code fences. Output only HTML fragment. Let's craft. We'll start with
About the role
then...
ThenResponsibilities
- ...
Requirements
- ...
Benefits
- ...
Pay
...
ThenSchedule
...
Make sure to close tags. Now write the content. About the role paragraph: Include location, job family, clearance, citizenship. "Location: Bedford, MA (with additional work locations in Avon, Boston, Braintree, Burlington, Cambridge, Fort Devens, Hanscom AFB, Norwood, Peabody, Quincy, Tauntham, Waltham, Westwood, MA). Job Family: Cyber and IT Risk Management. Must currently possess an active Top Secret/SCI clearance and be able to obtain a Top Secret SCI clearance with polygraph. U.S. citizenship is required." We need to list additional locations exactly as given: "USA MA Avon, USA MA Boston, USA MA Braintree, USA MA Burlington, USA MA Cambridge, USA MA Fort Devens, USA MA Hanscom AFB, USA MA Norwood, USA MA Peabody, USA MA Quincy, USA MA Taunton, USA MA Waltham, USA MA Westwood". We'll incorporate. Now Responsibilities list: We'll copy each bullet as - . Ensure proper punctuation. Requirements list: We'll have items: - 7+ years of related experience; prior performance in roles such as ISSO or ISSM; SAP experience required. - Education: Bachelor’s degree in a related discipline OR Associate’s degree in a related area + 2 years’ experience OR equivalent experience (4 years). - Certifications: IAT Level 3 (CISSP, CASP+ CE, CCNP Security, CISA, etc.) or IAM Level 3. -