Description
We are seeking a Program Information System Security Manager (P-ISSM) to join our Information Assurance (IA) team in Huntsville, AL. As a P-ISSM, you will report to the Collateral Information System Security Manager (ISSM) and play a valuable role in leading a team of Information System Security Officers (ISSOs) to deliver classified authorization and cybersecurity compliance support to programs operating on DCSA-authorized networks.
Responsibilities:
- Provide personnel management for a team of ISSOs, including employee check-ins, performance plans and reviews, training, professional development, and coaching.
- Provide technical oversight and quality review of ISSO assessments, authorization artifacts, and configuration management reviews.
- Serve as the Program ISSM for assigned classified information systems, working with the Collateral ISSM to develop, implement, and maintain security policies, procedures, and documentation.
- Lead Authorization to Operate (ATO) efforts and ongoing authorization activities.
- Review and certify authorization packages for submission to the Authorizing Official (AO).
- Act as the primary Information Assurance point of contact for Program Managers, Facility Security Officers, and program personnel.
- Develop risk-based solutions to complex technical and compliance issues.
- Lead Configuration Management efforts and chair or participate in the Change Control Board (CCB).
- Oversee continuous monitoring, including vulnerability scanning and remediation tracking.
- Direct preparation for DCSA Cyber Operational Readiness Assessments (CORA), Security Vulnerability Assessments (SVA), On-Site Verifications (OSVs), and other government cybersecurity inspections.
- Investigate information system security incidents and violations.
- Oversee media sanitization, declassification, and hardware release.
- Perform risk and vulnerability assessments and security audits.
- Evaluate and implement new cybersecurity processes, technologies, and tools.
- Prepare and present status reporting to the Collateral ISSM.
- Develop and deliver information system security training and awareness for users, privileged users, and ISSOs.
Requirements:
- Bachelor's degree with 8+ years of relevant cybersecurity, information technology, information assurance, or information systems security experience, or Master's degree with 6+ years of relevant experience.
- Active DoD Secret clearance, with the ability to obtain and maintain a Top Secret clearance.
- Industry certification required by DoD 8140 policy and aligned to the DoD Cyber Workforce Framework (DCWF) Information Systems Security Manager work role.
- Working knowledge of the Risk Management Framework (RMF), System Security Plans, and activities for receiving and maintaining information system authorization.
- Working knowledge of the National Industrial Security Program Operating Manual (NISPOM) and the DCSA Assessment and Authorization Guide (DAAG).
- Proficiency with the Enterprise Mission Assurance Support Service (eMASS).
- Experience with vulnerability management, compliance, and security monitoring tools.
Preferred Qualifications:
- High level of proficiency with the DCSA instance of eMASS or equivalent.
- Experience preparing for and supporting DCSA On-Site Validations (OSVs), CORA, SVA, or other government cybersecurity inspections.
- Familiarity with DoD classified information systems, including SIPRNet, SDREN or other classified computing environments.
- Experience with tools such as Splunk, Trellix, Tenable/ACAS, SCAP Compliance Checker, and STIG Viewer.
- Working knowledge of Windows and Linux operating systems, Active Directory, virtualization, and enterprise identity management solutions.
- Familiarity with cyber incident response activities.
- Prior experience managing teams of 3 or more individuals.