Network Information Security Manager

Network Information Security Manager Application Instructions

• External Applicants:
  Please upload your resume on the Apply screen. Your application will automatically populate your resume details, and you may verify and update data on the My Information page. Please review the job posting and load ALL documents required in the posting to the Resume/CV upload section at the bottom of the My Experience application page. Use the Select Files button to add multiple documents including your Resume/CV, references, cover letter, and any other supporting documents required.
  
  The "My Experience" page is the only opportunity to add your required supporting document attachments. You will not be able to modify your application after you submit it.
• Current Mercer University Employees:
  Apply from your existing Workday account. Do not apply from the external careers website. Log in to Workday and type Jobs Hub in the search bar. Locate the position and click Apply.

Mercer Engineering Research Center (MERC), a research institute of Mercer University, provides high quality engineering, scientific, and technical support services to both government and private industry customers. The Network Information Security Manager performs Cybersecurity Maturity Model audits for compliance under the supervision of the Director of Network Systems and Information Assurance.

• Provides oversight of Network Systems cybersecurity personnel or other personnel as assigned.
• Manages vulnerability remediations.
• Interprets and applies NIST 800-53 and NIST 800-171 requirements and communicates implications to stakeholders.
• Advises management and the Network Systems team on risk levels, vulnerabilities, and overall security posture across the MERC IT infrastructure.
• Collects, analyzes, and maintains data required for cybersecurity reporting and compliance activities.
• Ensures security improvement actions are properly evaluated, validated, and implemented.
• Coordinates cybersecurity checklists, testing activities, and reviews processes for the IT environment.
• Evaluates system and infrastructure changes to confirm that baseline security safeguards remain compliant.
• Participates in information security risk assessments as part of the Security Assessment and Authorization process.
• Contributes to the development, review, and maintenance of System Security Plans, policies, and Plan of Action and Milestones (POA&Ms).
• Prepares, distributes, and maintains plans security‑related plans, procedures, guidance, and standard operating procedures for network system(s) operations.
• Tracks audit findings and ensures timely and appropriate mitigation actions.
• Supports the development and maintenance of cybersecurity policy standards and implementation strategies.
• Ensures remediation plans and POA&Ms are created and maintained for vulnerabilities identified through assessments, audits, and inspections.
• Supports ongoing compliance activities, including configuration guideline adherence and continuous monitoring.
• Assists with continuous validation of organizational compliance with applicable policies, guidelines, procedures, regulations, and laws.
• Works effectively within hybrid cloud and on‑premises environments.
• Performs other duties as assigned.

• US Citizenship is required.
• Ability to obtain and maintain a DoD Security Clearance.
• An undergraduate degree in Cybersecurity or Information Technology with a cybersecurity focus from an accredited institution and at least 2 years of directly related experience; or an associate's degree from an accredited institution and 6 years of directly related experience.
• CISM, CISSP or equivalent certification is required.
• Ability to assist with or develop Systems Security Plans, policies and POAMs for compliance programs.
• Strong understanding of cybersecurity principles and best practices.
• Service‑oriented written and oral communications skills with the ability to collaborate effectively with users, peers, and vendors.
• Solid knowledge of IT infrastructure components and operations.

CISM, CISSP or equivalent certification is required.

MERC is a…