# Information System Security Manager (ISSM) **Company**: GDIT **Location**: Colorado Springs, CO **Work arrangement**: onsite **Experience**: senior **Job type**: full-time **Salary**: $144,245 - $195,155 **Category**: Security **Industry**: Technology **Apply**: https://gdit.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/USA-CO-Colorado-Springs/Information-Systems-Security-Manager--ISSM--III_RQ230930-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_e6cb29b4-915 ## Description The Information System Security Manager (ISSM) will serve as a principal advisor on all matters, technical and otherwise, involving the security of information systems under their purview. The position will provide "day-to-day" support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities. **Responsibilities:** - Lead, cultivate and maintain productive working relationships with other DoD agencies managers, data stewards, and senior leadership to foster productive and positive cyber security profile - Participate in the strategic planning and implementation of the Cyber Security Program - Provide expert input to the formulation of cyber security policies based upon the Risk Management Framework (RMF) with emphasize on Joint Special Access Program Implementation Guide (JSIG) authorization process - Advise customer on Risk Management Framework (RMF) assessment and authorization issues - Develop and implement a security assessment plan - Perform risk assessments and make recommendations to DoD agency customers - Advise government program managers on security testing methodologies and processes - Evaluate authorization documentation and provide written recommendations for authorization to government PM's - Develop and maintain a formal Information Systems Security Program - Ensure that all IAOs, network administrators, and other cyber security personnel receive the necessary technical and security training to carry out their duties - Develop, review, endorse, and recommend action by the AO or DAO of system assessment documentation - Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media - Develop and execute security assessment plans that include verification that the features and assurances required for each protection level functioning - Institute and implement a Configuration Control Board (CCB) charter - Maintain a and/or applicable repository for all system authorization documentation and modifications - Develop policies and procedures for responding to security incidents, to include investigating and reporting security violations and incidents - Ensure proper protection or corrective measures have been taken when an incident or vulnerability has been discovered within a system - Ensure that data ownership and responsibilities are established for each authorization boundary, to include accountability, access rights, and special handling requirements - Ensure development and implementation of an information security education, training, and awareness program, to include attending, monitoring, and presenting local cyber security training - Evaluate threats and vulnerabilities to ascertain whether additional safeguards are needed - Assess changes in the system, its environment, and operational needs that could affect the authorization - Ensure that authorization is accomplished a valid Authorization determination has been given for all authorization boundaries under your purview - Review AIS assessment plans - Coordinate with PSO or cognizant security official on approval of external information systems (e.g., guest systems, interconnected system with another organization) - Conduct periodic assessments of the security posture of the authorization boundaries - Ensure configuration management (CM) for security-relevant changes to software, hardware, and firmware and that they are properly documented - Ensure periodic testing is conducted to evaluate the security posture of IS by employing various intrusion/attack detection and monitoring tools (shared responsibility with ISSOs) - Ensure that system recovery and reconstitution processes developed and monitored to ensure that the authorization boundary can be recovered based on its availability level determination - Ensure all authorization documentation is current and accessible to properly authorized individuals - Ensure that system security requirements are addressed during all phases of the system life cycle - Establish and develop a self-inspection program within the organization - Periodically review system security to accommodate changes to policy or technology - Coordinate all technical security issues outside of area of expertise or responsibility with ISSE - Provide expert research and analysis in support of expanding programs and area of responsibility as it pertains to cyber security and information technology activities - Develop Assured File Transfers (AFT) on accordance with the JSIG - Provide leadership, mentoring, and quality assurance for Cyber Security and Information Technology team members **Requirements:** - 10+ years related experience - 2+ years SAP experience required - Prior performance in roles such as ISSO or ISSM - Master's degree or equivalent experience (6 years) - IAT Lvl III or IAM Lvl III - within 6 months of the date of hire. - Current - TS/SCI - Willing to obtain - TS/SCI with CI poly **Benefits:** - 401K with company match - Comprehensive health and wellness packages - Internal mobility team dedicated to helping you own your career - Professional growth opportunities including paid education and certifications - Cutting-edge technology you can learn from - Rest and recharge with additional paid vacation and holidays ## Skills ### Required - Information Security - Information Security Management - Information System Security - Risk Management Framework - Joint Special Access Program Implementation Guide ### Nice to have - SAP - ISSO - ISSM - IAT Lvl III - IAM Lvl III --- Source: [Apply at gdit.wd5.myworkdayjobs.com](https://gdit.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/USA-CO-Colorado-Springs/Information-Systems-Security-Manager--ISSM--III_RQ230930-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)