Information System Security Manager, Principal

** Torch Technologies
** Thank you for your interest in employment with Torch Technologies. We are a 100% employee-owned, Certified Great Place To Work and named Best Places to Work in Huntsville/Madison County, headquartered in Huntsville, AL with over 1200 employee-owners. Our team provides superior research, development, and engineering services to the Federal Government and Department of Defense. As one of the nation’s top 100 defense companies, the services we provide directly support the men and women who serve our country.

Our corporate mission sums up the pride our employee-owners take in the work we do: “Lighting the Pathway of Freedom”. And, as a Certified Evergreen ESOP, we have made the commitment to grow and sustain our company for the next 100 years! Come grow with us!

Torch Technologies is seeking an
** Information System Security Manager, Principal
** to join the team at Hill AFB, UT. Torch Technologies is a 100% employee-owned business dedicated to providing superior research, development, and engineering services to the Department of Defense. As defense contractors, the services we provide directly support the warfighter.
** As an Information System Security Manager, Principal your duties will include the following, but are not limited to:
*** Serve as the primary cybersecurity technical advisor to the Authorizing Official (AO), Program Manager (PM) and Information System Owner (ISO).
* Maintain the overall security posture of the IT systems, Conventional, PIT or otherwise within the respective organization, and be accountable for the implementation of DoDI 8510.01, Risk Management Framework (RMF) for DoD Information Technology (IT), (29 Dec 2020).
* Perform the provisions and duties outlined in AFI 17-130, Cybersecurity Program Management, (13 Feb 2020) para 2.10.
* Perform ISSM responsibilities as outlined in AFMAN 17-1303, Air Force Cybersecurity Workforce Improvement Program, (12 May 2020) para 2.16 (Attachment
2), as well as, AFI 17-101 (6 Feb 2020).
* Ensure IT professionals within the organization meet requirements outlined in AFMAN 17-1303.
* Develop the organization’s cybersecurity program for individual systems and IT programs overall to include cybersecurity architecture, requirements, objectives and policies, cybersecurity personnel, and cybersecurity processes and procedures.
* Control the continuous monitoring of systems within their purview to ensure compliance with cybersecurity policies.
* Perform the ISSM duties as outlined in DoDI 8510.01, DoDI 8500.01, AFI 17-101, AFI 17-130, and AFMAN 17-1303 for assigned systems/applications.
* Support implementation of the RMF.
* Assist in the development and maintenance a formal ISs security program and policies for their assigned area of responsibility.
* Assist in supporting the system/application A&A effort, to include assessing and guiding the quality and completeness of A&A activities, tasks, and resulting artifacts mandated by governing DoD and Air Force policies (i.e., RMF).
* Ensure proper measures are taken when an IS incident or vulnerability is discovered IAW the respective systems authorized security program and policies.
* Maintain and report IS and PIT system assessment and authorization status and issues IAW DoD and USAF guidance.
* Provide direction to the ISSO IAW DoDI 8500.01, AFMAN 17-1303, As well as AFI 17-101 (6 Feb 2020).
* Ensure that ISSOs are appointed in writing and provide oversight to certify they are following established cybersecurity policies and procedures.
* Coordinate with the organization's security manager to ensure issues affecting the organization's overall security are addressed appropriately.
* Ensure that ISOs and stewards associated with DoD information received, processed, stored, displayed, or transmitted on each DoD IS and PIT system are identified to establish accountability, access approvals, and special handling requirements.
* Maintain a repository for all organizational or system-level cybersecurity-related documentation.
* Monitor compliance with cybersecurity policy, as appropriate, and review the results of such monitoring.
* Ensure that cybersecurity inspections, tests, and reviews…