Information Systems Security Manager (ISSM) Job at GovCIO
The ideal candidate primary function is perform oversight of the development, implementation and evaluation of Information Systems (IS) and networks are operated, maintained and disposed of in accordance with security policies and practices. Support Department of Defense (DoD) agencies, such as HQ Air Force, Office of the Secretary of Defense (OSD) and Military Compartments efforts. The position will provide “day-to-day” support for Special Access Programs (SAPs), Collateral and Sensitive Compartmented Information (SCI activities) for geographically separated units. Duties include, but are not limited to reviewing and developing IS accreditation/certification support documentation; notifying the customer when changes occur that might affect IS accreditation/certification; performing system and network self-inspections; providing security coordination and review on all system test plans; attending team IS and Configuration Control Review Board meetings; identifying IS vulnerabilities and implementing countermeasures; representing internal and external customer on various technical review teams; conducting security surveys at subordinate facilities and gathering pertinent security documentation for inclusion into system accreditation packages; coordinating, preparing and tracking IS inspections, reports and responses; maintaining IS security records; advising on and preparing Co-Utilization/Service Agreements for network nodes operating in subordinate government facilities; and receiving direction from applicable stakeholders (i.e. Information System Owner (ISO), Wing, NAF, MAJCOM, Authorizing Official (AO)).
The position requires the following knowledge and responsibilities:
- Expert knowledge of Risk Management Framework (RMF) requirements/processes.
- Perform risk assessments and make recommendations to customers Advise government program managers on security testing methodologies and processes.
- Knowledge of current and emerging threats/threat vectors. (Physical, Cyber and Spectrum)
- Knowledge of critical information technology (IT) procurement requirements.
- Knowledge of Personally Identifiable Information (PII) data security standards.
- Knowledge of Personal Health Information (PHI) data security standards.
- Evaluate accreditation and certification documentation and provide written recommendations to ISO ore designee.
- Continuously monitor Cybersecurity posture to accommodate changes to policy, procedures and/or technology.
- Develop and maintain a formal comprehensive Cybersecurity Program.
- Ensure that all Cybersecurity, system administrators, and other IS personnel receive the necessary technical and security training to carry out their duties as well as a comprehensive information security education, training, and awareness program, which includes attending, monitoring, and presenting local IS security requirements.
- Develop, review, endorse, and recommend action by the AO of system certification documentation.
- Develop policies and procedures for responding to security incidents, and for investigating and reporting security violations and incidents.
- Establish, implement and continuously monitor a comprehensive Risk Management program, reporting any mitigations or countermeasures required to maintain an effective and secure environment.
- Conduct periodic testing of the security posture of the IS thereby safeguarding the configuration management (CM) program for security-relevant IS software, hardware, and firmware are properly documented.
- Ensure that system recovery processes are monitored to ensure that security features and procedures are properly restored IAW customers direction.
-
Provide leadership, mentoring, and quality assurance for Cybersecurity Team Members.Conduct manual SRG/STIG checklists and remediation.
- Willingness to submit to a Counterintelligence polygraph.
- Willingness to travel within the organizational geographic Area of Responsibility (AOR) (note - could be extensive, and will include both air and ground transportation)
Mandatory Qualifications:
High School with 9+ years (or commensurate experience
- Active IAM Level 2 Certification
- TS/SCI Clearance
- Working knowledge of Microsoft Office
Please Note :
www.epokagency.com is the go-to platform for job seekers looking for the best job postings from around the web. With a focus on quality, the platform guarantees that all job postings are from reliable sources and are up-to-date. It also offers a variety of tools to help users find the perfect job for them, such as searching by location and filtering by industry. Furthermore, www.epokagency.com provides helpful resources like resume tips and career advice to give job seekers an edge in their search. With its commitment to quality and user-friendliness, Site.com is the ideal place to find your next job.