Information System Security Manager III

GRS, Inc.; Arlington (VA); On-site; USD 90,000 - 140,000; Full time

Job summary

An established industry player is seeking a dedicated Information System Security Manager III to lead cybersecurity efforts within Special Access Programs. This pivotal role involves guiding the development of security policies, conducting risk assessments, and ensuring compliance with the Risk Management Framework. The ideal candidate will have over a decade of experience, a Master's degree, and the ability to foster productive relationships with various stakeholders. Join a team that values creativity and initiative while providing comprehensive benefits and a supportive work environment.

Benefits

Medical Insurance

Dental Insurance

Vision Insurance

Disability Insurance

Life Insurance

Retirement Plans

Qualifications

• 10+ years of experience in cybersecurity and information systems security management.
• Master’s Degree or equivalent experience required.

Responsibilities

• Lead relationships with DoD agencies to enhance cybersecurity profiles.
• Develop and implement security assessment plans and policies.

Skills

Cybersecurity Policies

Risk Management Framework (RMF)

Microsoft Office Suite

Communication Skills

Leadership and Mentorship

Education

Master’s Degree in a related area

Job description

Join to apply for the Information System Security Manager III role at GRS, Inc.

Global Resource Solutions, Inc. (GRS) is seeking an enthusiastic, motivated, detail-oriented, and talented individual for the position of Information System Security Manager (ISSM) III.

Job Description

Summary: The ISSM III’s primary role is to serve as a principal advisor on all matters, technical and otherwise, involving the security of information systems under their purview. The primary support will be within Special Access Programs (SAPs) supporting Department of Defense (DoD) agencies, such as HQ Air Force, Office of the Secretary of Defense, and Military Compartment efforts. The position provides day-to-day support for Collateral, Sensitive Compartmented Information (SCI), and SAP activities.

Essential Duties & Responsibilities

1. Lead, cultivate, and maintain productive relationships with other DoD agencies, managers, data stewards, and senior leadership to foster a positive cybersecurity profile.
2. Participate in strategic planning and implementation of the Cyber Security Program.
3. Provide expert input to formulate cybersecurity policies based on the Risk Management Framework (RMF), emphasizing the Joint Security Implementation Guide (JSIG) authorization process.
4. Advise customers on RMF assessment and authorization issues.
5. Develop and implement security assessment plans.
6. Perform risk assessments and recommend actions to DoD agency customers.
7. Advise government program managers on security testing methodologies and processes.
8. Evaluate authorization documentation and provide recommendations for authorization to government PMs.
9. Develop and maintain a formal Information Systems Security Program.
10. Ensure all cyber security personnel receive necessary technical and security training.
11. Develop, review, endorse, and recommend actions on system assessment documentation.
12. Ensure procedures are in place for hardware/media sanitization and destruction.
13. Develop and execute security assessment plans verifying features and assurances for each protection level.
14. Maintain repositories for authorization documentation and modifications.
15. Develop policies for responding to security incidents, including investigation and reporting.
16. Ensure proper measures are taken when vulnerabilities are discovered.
17. Establish data ownership and responsibilities for each authorization boundary.
18. Implement an information security education, training, and awareness program.
19. Evaluate threats and vulnerabilities to determine additional safeguards.
20. Assess system changes affecting authorization.
21. Ensure valid authorization for all boundaries under your purview.
22. Review AIS assessment plans.
23. Coordinate approval of external information systems.
24. Conduct periodic security posture assessments.
25. Ensure configuration management for security-relevant changes.
26. Conduct periodic security testing employing intrusion detection tools.
27. Ensure recovery processes are developed and monitored.
28. Keep authorization documentation current and accessible.
29. Address security requirements during all system life cycle phases.
30. Establish and review a self-inspection program.
31. Review system security to accommodate policy or technology changes.
32. Coordinate technical security issues outside your expertise with ISSE.
33. Provide research and analysis to support cybersecurity programs.
34. Develop Assured File Transfers (AFT) per JSIG.
35. Provide leadership and mentorship within the cybersecurity team.

Requirements

• Mandatory 10+ years of related experience.
• Master’s Degree in a related area or equivalent experience.
• Must meet DoD Directive 8570.01-M certification requirements for IAT Level 3 within 6 months of hire.

Security Requirements

• Current Top Secret Clearance with SCI Eligibility.
• Eligibility for access to SAPs.
• Willingness to undergo Counterintelligence Polygraph.

Skills

• Ability to work in a dynamic environment with DOD personnel and industry partners.
• Proficiency in Microsoft Office Suite.
• High level of originality, creativity, and initiative.
• Familiarity with security policies, manuals, DCIDs, JAFANs, and other policies.
• Ability to travel within the AOR, including air and ground transportation.
• Ability to lift up to 50 lbs.

Physical Requirements

This position requires sitting, bending, reaching, stooping, squatting, standing, and walking.

Communication

Excellent customer service skills, both face-to-face and via phone, with strong written and oral English skills.

GRS offers a rewarding career with comprehensive benefits, including medical, dental, vision, disability, life insurance, and retirement plans. We are an Equal Opportunity/Affirmative Action employer and participate in E-Verify.