Information Systems Security Manager; ISSM

Job Description

The ISSM will be responsible for system security, testing, and system accreditation activities, including developing and maintaining cybersecurity RMF and ATO related documentation, developing and updating System Security Plans (SSP), developing corrective action plans, receiving approval, and tracking implementation of corrective actions in a designated tool.

• Serve as an Information Systems Security Manager (ISSM).
• Implement the risk management framework for classified systems, typically following the Defense Counterintelligence Security Agency DCSA DAAPM or JSIG process and supporting communications with cognizant security authorities.
• Serve as the primary service desk resource for classified systems.
• Produce and maintain Body of Evidence (BoE) documentation to include risk assessments, SSPs, and POA&Ms.
• Maintain the day-to-day security posture and continuous monitoring for all systems, including patching and updates.
• Review and implement DD254 requirements of all classified systems.
• Maintain eMASS account and provide system awareness for all approved ATOs.

Education and Experience:

• Must have active in-scope TOP SECRET clearance or be able to obtain one and be able to maintain access to Sensitive Compartmented Information (SCI) and/or any necessary Special Access Programs (SAP).
• Bachelor of Science (IT-related discipline preferred).
• 5+ years of experience in Information Technology (IT) in a classified environment, or 3+ years of experience as an ISSM/ISSO in government/industrial security or an intelligence career field.

• Knowledge of technical standards relating to information system security; experience administering Windows and Linux operating systems, experience with large-scale server systems, thin client architecture, system virtualization, and other related peripherals.
• Experience with Certification and Authorization requirements as outlined in the 32
  
  CFR Part 117 NISPOM, RMF for DoD IT, ICD 503, JSIG/JAFAN & NIST RMF.
• Thorough understanding of US Government (specifically DoD) IS security policies.
• Strong communication skills, strong critical thinking and problem-solving skills; self-motivated with ability to effectively prioritize multiple projects; ability to work with people in a team environment and deal effectively with changing project priorities.
• Ability to manage time, make sound decisions, take independent action, analyze problems and provide focused solutions.
• High degree of attention to detail.
• DoDD 8140/DoD 8570 approved (Technician Level 2-3) certification required within 6 months of hire.

This position requires predominantly working in an office setting. Entry to laboratory environment may require use of PPE. Physical requirements include the ability to:

• Perform work utilizing a computer for extended periods of time.
• Sit for extended periods of time without being able to leave the work area.
• Stand for extended periods of time without being able to leave the work area.
• Climb stairs in performing the work.
• Lift up to 10 pounds.
• Walk for reasonable distances in performing the work.

• Medical, Dental & Vision Insurance Coverage.
• Life/ADD & Short/Long Term Disability Insurance.
• 401(k) Savings Plan.
• Employee Stock Purchase Plan (ESPP).
• Paid Time-Off (PTO).
• Holidays.
• Education Reimbursement.