Information Security Manager: Systems Risk & Compliance

MORSE Corp; Cambridge (MA); On-site; USD 120,000 - 170,000; Full time

Job summary

MORSE Corp in Cambridge, MA is seeking an Information System Security Manager (ISSM) to guide security in both classified and unclassified IT environments and advise on information system security matters.

You will collaborate with ISSMs, System Administrators, and Network Administrators to ensure compliance, draft security policies, implement controls, and perform continuous monitoring per NIST 800-37 and the Cybersecurity Maturity Model Certification (CMMC).

Qualifications

• 1 year of relevant cybersecurity experience.
• Strong understanding of NIST 800-37 and NIST 800-171.
• Experience implementing and assessing ACAS compliance.

Responsibilities

• Ensure systems are operated, maintained, and disposed of per security policy.
• Participate in the SDLC to design security features.
• Maintain security architecture including SIEM, vulnerability scanning, and DS/IPS.
• Collaborate with ISSMs, System Administrators, and Network Administrators to stay compliant.
• Draft policies and procedures related to information system security and regulatory requirements.
• Test controls, record assessments, and maintain POA&M.
• Conduct continuous monitoring of security controls as per NIST 800-37 and CMMC.
• Analyze vulnerability scans for Linux, Windows, and AWS.
• Research CVEs and present remediation findings to admins.

Skills

NIST 800-37

NIST 800-171

ACAS

1 year cybersecurity experience

Tools

SIEM

Vulnerability Scanning

DS/IPS

Job description

MORSE Corp in Cambridge, MA is seeking an Information System Security Manager (ISSM) to guide security in both classified and unclassified IT environments and advise on information system security matters.

You will collaborate with ISSMs, System Administrators, and Network Administrators to ensure compliance, draft security policies, implement controls, and perform continuous monitoring per NIST 800-37 and the Cybersecurity Maturity Model Certification (CMMC).