Information System Security Manager

Chenega MIOS SBU; Arlington (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

An established industry player is seeking an Information Systems Security Manager (ISSM) to lead cybersecurity initiatives. This role involves developing comprehensive strategies, managing risks, and ensuring compliance with industry standards. The ideal candidate will have extensive experience in cybersecurity leadership, a strong understanding of security regulations, and the ability to foster a proactive security culture. Join a team dedicated to enhancing national security through innovative technology solutions and make a significant impact in a collaborative environment focused on professional growth.

Qualifications

• 12+ years of cybersecurity experience with 5+ years in leadership roles.
• Expertise in network security, vulnerability management, and incident response.

Responsibilities

• Develop and implement a comprehensive cybersecurity strategy aligned with business objectives.
• Lead the identification and mitigation of cybersecurity risks while ensuring compliance with regulations.

Skills

Network Security

Vulnerability Management

Incident Response

Security Architecture

Risk Management

Leadership

Communication Skills

Analytical Skills

Education

Bachelor's Degree in Cybersecurity

Bachelor's Degree in Computer Science

Tools

Xacta

eMASS

ACAS

SCCM

SIEM

Job description

Information Systems Security Manager (ISSM)

Arlington, VA

Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employer’s core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals supporting large-scale government operations with cutting-edge technology and take your career to the next level!

SecuriGence delivers essential technology services supporting critical national security missions. We are seeking an Information Systems Security Manager (ISSM) to lead and strengthen our security posture. This role requires strategic vision, technical expertise, and operational leadership to ensure the security, confidentiality, integrity, and availability of our sensitive systems and data.

Responsibilities

1. Develop and evolve a comprehensive cybersecurity strategy aligned with DARPA's mission, technological landscape, and threat environment. Map critical information systems to business objectives and ensure security through process resiliency.
2. Lead the identification, assessment, and mitigation of cybersecurity risks, balancing operational needs with security requirements. Conduct site assessments and develop logistical plans.
3. Establish and maintain security policies, procedures, and standards that meet or exceed DoD and industry best practices. Develop and enforce cybersecurity policies for performers and military organizations.
4. Ensure adherence to all relevant security regulations, including NIST RMF, DoD STIGs, and other mandates. Lead successful CCRIs and achieve high compliance scores in cybersecurity inspections.
5. Promote a strong security culture within SecuriGence and DARPA through training programs and knowledge sharing, fostering awareness and proactive engagement.
6. Lead and mentor a team of cybersecurity professionals, fostering a high-performing and collaborative environment. Manage teams of contractors, civilians, and military personnel.
7. Develop and implement an incident response plan for swift detection, containment, and remediation of security incidents. Resolve critical security incidents and minimize operational disruptions.
8. Establish a vulnerability management program that exceeds DOD mandates, including regular scanning, assessment, and remediation. Manage cybersecurity vulnerabilities and security controls.
9. Oversee 24/7 security operations, including continuous monitoring of networks, systems, and data for anomalies and threats.
10. Stay informed of emerging threats and vulnerabilities. Adapt security strategies accordingly, leveraging experience in threat analysis and cyberspace planning.
11. Design and implement secure architectures for systems, networks, and applications, incorporating defense-in-depth strategies. Utilize virtualization and tools convergence to stabilize enterprise systems.
12. Conduct security assessments and audits, identify weaknesses, and recommend corrective actions based on site assessments and technology evaluations.
13. Evaluate, select, and implement security tools (e.g., ACAS, AD, DNS, HBSS, ITSM, OCSP, OS Imaging, SCCM, SCOM, SIEM) to enhance security posture.
14. Collaborate with engineering teams to embed security into the development lifecycle, utilizing Scrum methodologies to improve system reporting and vulnerability compliance.
15. Serve as the primary point of contact for security and contract issues, ensuring systems meet security and contractual requirements, and driving process improvements for cost savings.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or related field.
• 12+ years of cybersecurity experience, including 5+ years in leadership or management roles.
• Experience within the Intelligence Community, including JCIP and JSIG RMF implementations.
• Experience with Xacta and eMASS.
• Must obtain or hold an Agilist certification and DoD 8140.01 IAM Level II certification.
• Active TS/SCI clearance required.

Knowledge, Skills, and Abilities

• Expertise in network security, vulnerability management, incident response, security architecture, and risk management.
• Proven leadership, communication skills, and ability to build stakeholder relationships.
• Strong analytical and problem-solving skills, strategic thinking, and decision-making under pressure.
• Experience working with DARPA or other DoD agencies, with knowledge of their security requirements and technologies.
• Familiarity with agile development and SecDevOps practices.