IAVM Compliance Manager

Vectrus; Kuwait City; On-site; KWD 70,000 - 100,000; Full time

Job summary

Vectrus, a leading company in mission support, seeks a Cybersecurity Information Assurance Vulnerability Compliance Manager in Kuwait City. In this role, you will ensure a robust security posture, lead vulnerability assessments, and collaborate with military and business communities to safeguard critical assets. You'll work with a skilled team to enhance compliance with federal cybersecurity standards while benefiting from company-paid housing, transportation, and a competitive benefits package.

Benefits

Company-paid housing

Transportation assistance

Completion bonus

Tuition reimbursement

Qualifications

• Requires active Secret Clearance.
• Minimum seven years of experience in telecommunications sector.
• Understanding of DoD cybersecurity policies.

Responsibilities

• Utilize automated assessment tools to report vulnerability metrics.
• Ensure compliance with DoD cybersecurity policies.
• Conduct risk assessments and manage incident responses.

Skills

Vulnerability Management

Cybersecurity Compliance

Incident Response

Risk Assessment

Stakeholder Communication

Education

Bachelor's Degree in Computer Science or related fields

Tools

Automated Compliance Assessment Tools

Linux Patch Management Tools

Job description

Working across the globe, V2X builds smart solutions designed to integrate physical and digital infrastructure from base to battlefield. We bring 120 years of successful mission support to improve security, streamline logistics, and enhance readiness. Aligned around a shared purpose, our $3.9B company and 16,000 people work alongside our clients, here and abroad, to tackle their most complex challenges with integrity, respect, responsibility, and professionalism.

As a Cybersecurity Information Assurance Vulnerability (IAVM) Compliance Manager, ensure a robust security posture and compliance adherence to DoDIN cybersecurity governance within the SWA AOR. The IAVM Compliance Manager will employ technical expertise in OS administration, CIS benchmark best practices, troubleshooting, maintenance, and proficiency in scripting languages for automation of security tasks. The IAVM Compliance Manager will supervise teams of professionals in conducting thorough vulnerability assessments, merging information assurance compliance strategies with industry standards to defend DoDIN Enterprise solutions and capabilities for its tenants and other cybersecurity customers. By leveraging cybersecurity and compliance expertise, the IAVM Compliance Manager will safeguard critical assets from potential threats, sustaining the integrity of the information infrastructure.

Professional Cybersecurity (IAVM) Compliance Managers possess a strong background in vulnerability management and compliance, enabling them to lead teams and contribute to the ongoing security resilience of the DoDIN in the SWA AOR. The IAVM Compliance Manager is the operations liaison between the military, the customers, and the business community. IAVM Compliance Manager works closely with first-line supervisors to ensure a cohesive team that works seamlessly and efficiently together. Program: OMDAC-SWACA

This position offers company-paid housing and transportation, a completion bonus and tuition reimbursement program!

You must satisfy all host country requirements to legally work in the host country in order to be qualified for this position.

Overview

Working across the globe, V2X builds smart solutions designed to integrate physical and digital infrastructure from base to battlefield. We bring 120 years of successful mission support to improve security, streamline logistics, and enhance readiness. Aligned around a shared purpose, our $3.9B company and 16,000 people work alongside our clients, here and abroad, to tackle their most complex challenges with integrity, respect, responsibility, and professionalism.

As a Cybersecurity Information Assurance Vulnerability (IAVM) Compliance Manager, ensure a robust security posture and compliance adherence to DoDIN cybersecurity governance within the SWA AOR. The IAVM Compliance Manager will employ technical expertise in OS administration, CIS benchmark best practices, troubleshooting, maintenance, and proficiency in scripting languages for automation of security tasks. The IAVM Compliance Manager will supervise teams of professionals in conducting thorough vulnerability assessments, merging information assurance compliance strategies with industry standards to defend DoDIN Enterprise solutions and capabilities for its tenants and other cybersecurity customers. By leveraging cybersecurity and compliance expertise, the IAVM Compliance Manager will safeguard critical assets from potential threats, sustaining the integrity of the information infrastructure.

Professional Cybersecurity (IAVM) Compliance Managers possess a strong background in vulnerability management and compliance, enabling them to lead teams and contribute to the ongoing security resilience of the DoDIN in the SWA AOR. The IAVM Compliance Manager is the operations liaison between the military, the customers, and the business community. IAVM Compliance Manager works closely with first-line supervisors to ensure a cohesive team that works seamlessly and efficiently together. Program: OMDAC-SWACA

This position offers company-paid housing and transportation, a completion bonus and tuition reimbursement program!

You must satisfy all host country requirements to legally work in the host country in order to be qualified for this position.

Responsibilities

• Utilize automated compliance assessment tools to generate, store, and report using quantitative vulnerability metrics.
• Ensure compliance with DoD and federal cybersecurity policies, regulations, and standards.
• Develop and implement incident response plans to address cybersecurity incidents promptly.
• Investigate and analyze security incidents, providing detailed reports and recommendations for improvements.
• Contribute to the development and maintenance of security policies, procedures, and guidelines.
• Conduct risk assessments to evaluate the potential impact of security threats and vulnerabilities.
• Demonstrate knowledge of automated patch management tools in the Linux environment.
• Collaborate with stakeholders to develop and implement risk mitigation strategies.
• Recommend improvements to enhance the overall security posture of the network.
• Manage access controls, identity management, and permissions consistent with security clearance status and level.
• Automation of routine vulnerability scans and remediation processes.
• Collaborate with other cybersecurity professionals, IT teams, and stakeholders.
• Employ effective communication with technical and non-technical stakeholders to articulate the posture of the DODIN in the SWA AOR.
• Use a proactive approach to implementing continuous monitoring programs to identify and resolve security threats.
• Stay informed of emerging cybersecurity threats, technologies, and professional certification requirements, defined under DoD 8571.01M and DODD 8140 to enhance skills and advance working knowledge.
• Perform any additional duties as assigned.

Qualifications

• Qualifications
• Security Clearance:
  • Requires an active Secret Clearance
• Education / Certifications: One year of related experience may be substituted for one year of education if degree is required.
  • Bachelor’s Degree or equivalent experience preferably in Computer Science or MIS, IS, Engineering or related field.
  • This position requires candidates to adhere to DoD 8570.01M. All candidates are required to maintain at least one (1) baseline certification and one (1) computing environment (CE) certification. Baseline certifications cannot also be used as a Computing Environment (CE) certification.
  • The authorized certifications for this job title are listed as follows:
• IAT Level: IAT III
• BASELINE:
  • Cisco: CCNP Security
  • CompTIA: CASP+ ce: Advanced Security Practitioner
  • GIAC: GCED: Certified Enterprise Defender
  • GIAC: GCIH: Certified Incident Handler
  • ISACA: CISA: Certified Information Systems Auditor
  • ISC2: CCSP: Certified Cloud Security Professional
  • ISC2: CISSP (or Associate): Certified Information Systems Security Professional
• COMPUTING ENVIRONMENT (CE):
  • CEH - Certified Ethical Hacker
  • CHFI - Computer Hacking Forensic Investigator
  • CIH - Certified Incident Handler
  • Cisco: CCIE - Certified Internetwork Expert - ANY
  • Cisco: CCNP - Certified Network Professional - ANY
  • CND - Certified Network Defender
  • GCIH - Certified Incident Handler
  • MCSE - Certified Solutions Expert (ANY above 2012)
  • Microsoft: 365 Certified: Enterprise Administrator Expert
  • Microsoft: Certified: Azure Associate (ANY)
  • Microsoft: Certified: Azure Expert (ANY)
  • Red Hat: RHCA - Certified Architect
  • Red Hat: RHCE - Certified Engineer
  • RHCSA: Red Hat Certified System Administrator
• Experience:
  • Requires a minimum of seven (7) years of experience in telecommunications sector.

We are committed to an inclusive and diverse workplace that values and supports the contributions of each individual. This commitment along with our common Vision and Values of Integrity, Respect, and Responsibility, allows us to leverage differences, encourage innovation and expand our success in the global marketplace. Vectrus is an Equal Opportunity /Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, protected veteran status or status as an individual with a disability. EOE/Minority/Female/Disabled/Veteran.

About the company

For more than 70 years, Vectrus has provided critical mission support for our customers’ toughest operational challenges.

Notice

Talentify is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.

Talentify provides reasonable accommodations to qualified applicants with disabilities, including disabled veterans. Request assistance at [e-mail] or 407-000-0000.

Federal law requires every new hire to complete Form I-9 and present proof of identity and U.S. work eligibility.

An Automated Employment Decision Tool (AEDT) will score your job-related skills and responses. Bias-audit & data-use details: www.talentify.io/bias-audit-report . NYC applicants may request an alternative process or accommodation at [e-mail] or 407-000-0000.