Information Systems Security Manager (ISSM)

Company: GovCIO
Location: San Antonio
Posted on: November 26, 2022

Job Description:

The ideal candidate primary function is perform oversight of the development, implementation and evaluation of Information Systems (IS) and networks are operated, maintained and disposed of in accordance with security policies and practices. Support Department of Defense (DoD) agencies, such as HQ Air Force, Office of the Secretary of Defense (OSD) and Military Compartments efforts. The position will provide day-to-day support for Special Access Programs (SAPs), Collateral and Sensitive Compartmented Information (SCI activities) for geographically separated units. Duties include, but are not limited to reviewing and developing IS accreditation/certification support documentation; notifying the customer when changes occur that might affect IS accreditation/certification; performing system and network self-inspections; providing security coordination and review on all system test plans; attending team IS and Configuration Control Review Board meetings; identifying IS vulnerabilities and implementing countermeasures; representing internal and external customer on various technical review teams; conducting security surveys at subordinate facilities and gathering pertinent security documentation for inclusion into system accreditation packages; coordinating, preparing and tracking IS inspections, reports and responses; maintaining IS security records; advising on and preparing Co-Utilization/Service Agreements for network nodes operating in subordinate government facilities; and receiving direction from applicable stakeholders (i.e. Information System Owner (ISO), Wing, NAF, MAJCOM, Authorizing Official (AO)).The position requires the following knowledge and responsibilities:

• Expert knowledge of Risk Management Framework (RMF) requirements/processes.
• Perform risk assessments and make recommendations to customers Advise government program managers on security testing methodologies and processes.
• Knowledge of current and emerging threats/threat vectors. (Physical, Cyber and Spectrum)
• Knowledge of critical information technology (IT) procurement requirements.
• Knowledge of Personally Identifiable Information (PII) data security standards.
• Knowledge of Personal Health Information (PHI) data security standards.
• Evaluate accreditation and certification documentation and provide written recommendations to ISO ore designee.
• Continuously monitor Cybersecurity posture to accommodate changes to policy, procedures and/or technology.
• Develop and maintain a formal comprehensive Cybersecurity Program.
• Ensure that all Cybersecurity, system administrators, and other IS personnel receive the necessary technical and security training to carry out their duties as well as a comprehensive information security education, training, and awareness program, which includes attending, monitoring, and presenting local IS security requirements.
• Develop, review, endorse, and recommend action by the AO of system certification documentation.
• Develop policies and procedures for responding to security incidents, and for investigating and reporting security violations and incidents.
• Establish, implement and continuously monitor a comprehensive Risk Management program, reporting any mitigations or countermeasures required to maintain an effective and secure environment.
• Conduct periodic testing of the security posture of the IS thereby safeguarding the configuration management (CM) program for security-relevant IS software, hardware, and firmware are properly documented.
• Ensure that system recovery processes are monitored to ensure that security features and procedures are properly restored IAW customers direction.
• Provide leadership, mentoring, and quality assurance for Cybersecurity Team Members.Conduct manual SRG/STIG checklists and remediation.
• Willingness to submit to a Counterintelligence polygraph.
• Willingness to travel within the organizational geographic Area of Responsibility (AOR) (note - could be extensive, and will include both air and ground transportation)Mandatory Qualifications:High School with 9+ years (or commensurate experience
  • Active IAM Level 2 Certification
  • TS/SCI Clearance
  • Working knowledge of Microsoft Office#cjpost#dicepost#cjpostCOVID Policy: New employees will be required to adhere to the Company's and its clients' COVID-19 safety procedures. In the event that the COVID-19 vaccination mandate for Federal Contractors is enforced, you must become fully vaccinated or request and be approved for an exemption. Employees working onsite at a client location must comply with our client's COVID-19 requirements.GovCIO is a team of professionals who want to make a difference. And that can only happen with a diverse, happy, and cared-for team. So, we prioritize your well-being, equity for all and look for ways to make work a better place for each of us every day.We are an Equal Opportunity Employer. All qualified applicants receive consideration for employment without regard to race, ethnicity, religious affiliation, gender, gender identity or expression, sexual orientation, national origin, or disability status. EOE AA M/ F/Vet/Disabled

Keywords: GovCIO, San Antonio , Information Systems Security Manager (ISSM), IT / Software / Systems , San Antonio, Texas