Description
The Information Systems Security Manager (ISSM) I will serve as a principal advisor on all matters, technical and otherwise, involving the security of information systems under their purview. The position will provide 'day-to-day' support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities.
The ISSM's primary responsibilities include:
- Performing oversight of the development, implementation and evaluation of information system security program policy;
- Developing and overseeing operational information systems security implementation policy and guidelines;
- Advising customers on Risk Management Framework (RMF) assessment and authorization issues;
- Performing risk assessments and making recommendations to DoD agency customers;
- Evaluating authorization documentation and providing written recommendations for authorization;
- Developing and maintaining a formal Information Systems Security Program;
- Ensuring that all IAOs, network administrators, and other cyber security personnel receive necessary technical and security training;
- Developing and executing security assessment plans;
- Maintaining and/or applicable repository for all system authorization documentation and modifications;
- Instituting and implementing a Configuration Control Board (CCB) charter;
- Developing policies and procedures for responding to security incidents;
- Ensuring proper protection or corrective measures have been taken when an incident or vulnerability has been discovered;
- Evaluating threats and vulnerabilities to ascertain whether additional safeguards are needed;
- Assessing changes in the system, its environment, and operational needs that could affect the authorization;
- Ensuring that authorization is accomplished and a valid Authorization determination has been given for all authorization boundaries;
- Conducting periodic assessments of the security posture of the authorization boundaries;
- Ensuring configuration management (CM) for security-relevant changes to software, hardware, and firmware;
- Ensuring periodic testing is conducted to evaluate the security posture of IS;
- Ensuring that system recovery and reconstitution processes are developed and monitored;
- Ensuring all authorization documentation is current and accessible;
- Ensuring that system security requirements are addressed during all phases of the system life cycle;
- Participating in self-inspections and conducting the duties of the Information System Security Officer (ISSO) if one is not present.
The likely salary range for this position is $109,735 - $148,465.