Information System Security Manager 3

iNovex; Annapolis (MD); On-site; USD 90,000 - 150,000; Full time

Job summary

An established industry player seeks a Level 3 Information System Security Manager to lead critical cybersecurity efforts. This role involves managing security policies, conducting vulnerability assessments, and supporting compliance with DoD RMF processes. You will play a vital role in ensuring the security of information systems while collaborating with top-tier professionals in the field. The company values a strong work/life balance and invests in employee growth through exceptional benefits and flexible schedules. If you are passionate about cybersecurity and ready to make a significant impact, this opportunity is designed for you.

Benefits

Flexible schedules

Paid training

Mentoring

Exceptional benefits

Qualifications

• 12 years of experience in security authorization and knowledge of security tools.
• Bachelor's degree in relevant field or equivalent work experience.

Responsibilities

• Manage security policies and operational security posture for information systems.
• Conduct vulnerability assessments and support security authorization activities.

Skills

Security Engineering

Vulnerability Testing

Penetration Testing

Risk Management

Insider Threat Analysis

IT Policies and Procedures

Requirements Gathering

Risk Assessment

Education

Bachelor's degree in Computer Science or related field

Additional 4 years of work-related experience

Tools

Security Tools

Encryption Tools

PKI Services

Job description

ORANGE you glad that you chose RealmOne?

RealmOne was built on the principle that people matter first and foremost. We believe in providing a strong work/life balance by investing in our employees and encouraging professional and personal growth. We do this by offering exceptional benefits, flexible schedules, and the tools necessary to achieve success through paid training, mentoring, and the opportunity to work alongside top-notch security professionals.

Join us on this journey as we execute this new mission-critical contract providing Cybersecurity Expertise and Risk Management!

Your effort and expertise are crucial to the success and execution of this impactful mission that is critical in ensuring mission success through Security Engineering, Vulnerability Testing, Penetration Testing, Risk Management and Assessment, Insider Threat Analysis, and IT Policies and Procedures by improving, protecting, and defending our Nation’s Security.

Job Description:

Provide management support for a program, organization, system, or enclave’s Information Assurance program. Provide management support for proposing, coordinating, implementing, and enforcing Information System Security policies, standards, and methodologies. Manage operational security posture for an Information System or program to ensure Information System Security policies, standards, and procedures are established and followed. Provide management of security aspects of the Information System and perform day-to-day security operations of the system. Assist ISSEs and ISSOs with evaluating security solutions to ensure they meet security requirements for processing classified information. Manage the performance of vulnerability/risk assessment analysis to support security authorization. Provide management support to configuration management (CM) for information system security SW, HW, and FW. Manage changes to systems and assess the security impact of those changes. Manage the process and preparation of documentation reviews to include SSPs, Risk Assessment Reports, C&A packages, and System Requirements Traceability Matrices (SRTMs). Support security authorization activities in compliance with DoD RMF process and DIACAP.

The Level 3 Information System Security Manager shall possess the following capabilities:

• Perform requirements gathering and analysis of said requirements
• Perform functional analysis to identify required tasks and their interrelationships
• Identify and map current security infrastructure as a foundation to define future programs
• Collaborate with engineers on systems integration efforts
• Plan and coordinate implementation of IT security programs and policies
• Analyze user needs to determine functional and cross-functional requirements
• Gather and organize technical information about an organization’s mission goals and needs, existing security products, and ongoing programs in the multi-level security arena
• Perform functional allocation and identify resources required for each task
• Perform risk analysis that also includes risk assessment
• Enable Government planning, coordination, and oversight of organizational implementation of information security services
• Enable design and implementation of future IT systems and related security
• Assist Program Managers with administrative and technical oversight with specific program's within the portfolio
• Facilitate issue resolution through integrated product teams and Technical Exchange Meetings (TEM)
• Provide support for a program, organization, system, or enclave’s information assurance program
• Provide daily oversight and direction to contractor ISSOs
• Oversee efforts of engineering staff to design, develop, engineer and implement solutions to security requirements
• Interact with customers, IT staff, and high-level corporate officers to define and achieve required Cybersecurity objectives
• Serve as the Program's ISSM
• Enable the Government with the development and implementation of DoD IT security services
• Collaborate with engineers on systems integration and life cycle requirements
• Advise Program Managers on administrative and technical oversight matters in regards to portfolio programs
• Enable Program Managers with administrative and technical oversight assistance with specific program's within the portfolio
• Enable design and implementation of future IT systems and related security.

Qualifications:

• 12 years of work-related experience in the field of security authorization is required. Experience in the following areas is required: knowledge of current security tools, HW/SW security implementation; communication protocols; or encryption tools and techniques.
• Familiarity with commercial security products, security authorization techniques, security incident management, and PKI and authorization services.
• Bachelor's degree in Computer Science or a related field (e.g., General Engineering, Computer Engineering, Electrical Engineering, Systems Engineering, Mathematics, Computer Forensics, Cybersecurity, Information Technology, Information Assurance, Information Security, and Information Systems) is required.
• In lieu of a Bachelor’s degree, an additional 4 years of work-related experience may be substituted.

Certifications Required:

• DoD 8570 compliance with IAM III is required.

Position requires active Security Clearance with appropriate Polygraph