Information System Security Manager (AROWS)

Empower AI; Maryland; On-site; USD 100,000 - 130,000; Full time

Job summary

A federal security solutions provider is seeking an Information System Security Manager in Maryland. The role involves conducting security inspections, implementing cybersecurity programs, and ensuring compliance with security guidelines. Candidates should have 4–9 years of experience, a relevant degree, and possess or be able to obtain a Secret Security Clearance. This position offers a chance to contribute significantly to national security efforts.

Qualifications

• 4–9 years of relevant experience.
• IAM Level II DoD approved cybersecurity baseline certification or higher.
• Knowledge of NIST publications and RMF process.

Responsibilities

• Conduct security inspections and reviews of RMF Information Assurance Package.
• Implement formal information system security program.
• Ensure compliance with security configuration guidelines.
• Implement log management and analytics processes.

Skills

Information Assurance

Cyber Security

Risk Management Framework (RMF)

Technical Writing

Communication Skills

Education

Bachelor’s Degree in Information Systems or related field

Tools

Security Information and Event Management (SIEM)

eMASS

Splunk

Job description

Information System Security Manager (AROWS)

Empower AI is AI for government. Empower AI gives federal agency leaders the tools to elevate the potential of their workforce with a direct path for meaningful transformation. Headquartered in Reston, Va., Empower AI leverages three decades of experience solving complex challenges in Health, Defense, and Civilian missions. Our proven Empower AI Platform® provides a practical, sustainable path for clients to achieve transformation that is true to who they are, what they do, how they work, with the resources they have. The result is a government workforce that is exponentially more creative and productive. For more information, visit www.Empower.ai. Empower AI is proud to be recognized as a 2024 Military Friendly Employer by Viqtory, the publisher of G.I. Jobs. This designation reflects the company’s commitment to hiring and supporting active‑duty and veteran employees.

Responsibilities

• Conduct information system security inspections, tests, and reviews of the Risk Management Framework (RMF) Information Assurance Package to ensure AROWS maintains an Authority to Operate (ATO). Update artifacts and information within the Enterprise Mission Assurance Support Service (eMASS) to validate Security Controls and Assessments. Develop Plan of Actions and Milestones (POAMs) for non‑compliant items.
• Implement and enforce a formal information system security program, including development and review of security concept of operations, systems security plans, cyber security policies, security control assessments, contingency plans, configuration management plans, incident response plans, plan of actions and milestones, risk management plans, vulnerability scanning, and/or vulnerability management plans.
• Demonstrate hands‑on knowledge and experience with Information Assurance/Cyber Engineering requirements, design and implementation to include systems engineering principles, requirements analysis, system development (software and hardware), network security architecture concepts (e.g., topology, protocols, components, etc.), and IT security principles and methods (e.g., firewalls, demilitarized zones, encryption, etc.).
• Ensure software, hardware, and firmware complies with appropriate security configuration guidelines (e.g., security technical implementation guides / security requirement guides).
• Ensure cybersecurity‑related events or configuration changes that impact AF IT authorization or adversely impact the security posture are formally reported to the AO and other affected parties, such as IOs and stewards and AOs of interconnected IT.
• Implement Security Information and Event Management Processes, including log aggregation, log analytics, visualization, alerting, and log retention.

Requirements

• Bachelor’s Degree in Information Systems, Information Assurance Management, Computer Science, or related field. (May be substituted for relevant work experience).
• 4–9 years experience.
• IAM Level II DoD approved cybersecurity baseline certification, or higher (CAP, CASP, CISA, CISM, CISSP (or Associate), GSLC).
• Demonstrated on‑the‑job knowledge and experience of the Risk Management Framework (RMF) process and the National Institute of Standards and Technology (NIST) publications (specifically NIST 800‑53 and NIST 800‑37), including development and maintenance of associated certification and accreditation documentation.
• Must possess or be able to obtain a Secret Security Clearance.

Desired Qualifications

• Demonstrated on‑the‑job knowledge and experience with Security Information and Event Management Systems (e.g., Splunk).
• Ability to manage the Plan of Actions & Milestones (POA&M) documents associated with Information Systems.
• Excellent writing, verbal communication, and time‑management skills.

All hiring and promotion decisions at Empower AI are based on merit to bring the best talent available to contribute to our firm’s overall success. It is the policy of Empower AI not to discriminate against any applicant for employment, or employee because of age, color, sex, disability, national origin, race, religion, or veteran status. Empower AI is a VEVRAA Federal Contractor.