Information System Security Manager I (DoD SAP/SCI)

Global Resource Solutions, Inc.; Boston (MA); On-site; USD 140,000 - 145,000; Full time

Job summary

Global Resource Solutions, Inc. in Boston, MA seeks an Information System Security Manager I to support DoD SAPs and SCI/SAP activities.

The role focuses on day-to-day security operations for Collateral, SCI, and SAP environments within SAP networks. The ISSM I will oversee policy development, risk assessments, and security testing, coordinating with government PMs and AIS personnel to ensure robust information security and compliance.

Qualifications

• Five to seven years related experience.
• Bachelor’s Degree in a related area or equivalent experience (Four years).
• Must meet position and certification requirements outlined in DoD Directive 8570.01-M for Information Assurance Technician Level 3 within 6 months of hire.

Responsibilities

• Perform oversight of the development, implementation and evaluation of information system security program policy; special emphasis placed upon integration of existing SAP network infrastructures.
• Perform analysis of network security, based upon the RMF or JAFAN authorization process; advise customer on IT assessment and authorization issues.
• Perform risk assessments and make recommendations to customers.
• Advise government program managers on security testing methodologies and processes.
• Evaluate assessment documentation and provide written recommendations for authorization to government PM’s.
• Periodically review system security to accommodate changes to policy or technology.
• Develop and maintain a formal Information Systems Security Program.
• Ensure that all IAOs, network administrators, and other AIS personnel receive the necessary technical and security training to carry out their duties.
• Develop, review, endorse, and recommend action by the AO or DAO of system assessment documentation.
• Ensure approved procedures are in place for clearing, purging, declassifying, and releasing system memory, media, and output.
• Conduct assessment tests that include verification that the features and assurances required for each protection level are functional.
• Maintain a repository for all system authorization documentation and modifications.
• Coordinate AIS security inspections, tests, and reviews.
• Develop policies and procedures for responding to security incidents, and for investigating and reporting security violations and incidents.
• Ensure proper protection or corrective measures have been taken when an incident or vulnerability has been discovered within a system.
• Ensure that data ownership and responsibilities are established for each AIS, to include accountability, access rights, and special handling requirements.
• Ensure development and implementation of an information security education, training, and awareness program, to include attending, monitoring, and presenting local AIS security training.
• Ensure that security assessments are completed and documented.
• Evaluate threats and vulnerabilities to ascertain whether additional safeguards are needed.
• Assess changes in the system, its environment, and operational needs that could affect the authorization.
• Ensure that authorization is accomplished on each AIS.
• Review AIS assessment plans
• Conduct periodic assessments of the security posture of the AIS
• Ensure configuration management for security-relevant AIS software, hardware, and firmware are properly documented.
• Ensure that system recovery processes are monitored to ensure that security features and procedures are properly restored
• Ensure all AIS authorization documentation is current and accessible to properly authorized individuals
• Ensure that system security requirements are addressed during all phases of the system life cycle
• Participate in self-inspections; identify security discrepancies and report security incidents
• Coordinate all technical security issues outside of area of expertise or responsibility with SSE
• Provide expert research and analysis in support of expanding programs and area of responsibility
• Perform file transfers between local systems to storage devices

Skills

Security clearance

RMF/JAFAN familiarity

Microsoft Office

Education

Bachelor's Degree in a related area

Job description

Global Resource Solutions, Inc. in Boston, MA seeks an Information System Security Manager I to support DoD SAPs and SCI/SAP activities.

The role focuses on day-to-day security operations for Collateral, SCI, and SAP environments within SAP networks. The ISSM I will oversee policy development, risk assessments, and security testing, coordinating with government PMs and AIS personnel to ensure robust information security and compliance.