Information Systems Security Manager - Intermediate with Security Clearance

Rividium Inc; Springfield (VA); On-site; USD 110,000 - 140,000; Full time

Job summary

RiVidium Inc. is seeking an Information Systems Security Manager – Intermediate to oversee cybersecurity for programs, systems, and enclosures. You will guide risk assessments, allocate resources, advise CIO, and coordinate enterprise continuity and security testing.

Candidates should have an associate degree or higher and ITIL V4 familiarity. The role emphasizes leadership, budget oversight, threat analysis, and collaboration with stakeholders to maintain robust security posture across the

Qualifications

• Experience in log auditing and audit logging.
• Understanding of AWS and cloud concepts.
• ITIL V4 Foundation familiarity is desirable.

Responsibilities

• Be responsible for cybersecurity of a program, organization, system, or enclave.
• Acquire and manage resources to support IT security goals and reduce risk.
• Advise CIO on risk levels and security posture.
• Lead enterprise continuity of operations program and strategy.
• Coordinate security inspections, tests, and reviews for the network environment.
• Develop and maintain enterprise information security architecture and related plans.

Skills

Log auditing

Audit logging

AWS

Help Desk Experience

ITIL v4 Foundation

Intrusion detection techniques

Education

Associate's degree or higher in Computer Science / Cyber Security / Information Technology / Software Engineering / Information Systems

Tools

AWS

Job description

Title Information Systems Security Manager - Intermediate Full-Time/Part-Time Full-Time Description RiVidium Inc. is seeking an individual to be responsible for the cybersecurity of a program, organization, system, or enclave. Responsibilities and abilities for this position shall include, but not limited to:

• Acquire and manage the necessary resources, including leadership support, financial resources, and key security personnel, to support information technology (IT) security goals and objectives and reduce overall organizational risk.
• Acquire necessary resources, including financial resources, to conduct an effective enterprise continuity of operations program.
• Advise senior management (e.g., Chief Information Officer [CIO]) on risk levels and security posture.
• Advise senior management (e.g., CIO) on cost/benefit analysis of information security programs, policies, processes, systems, and elements.
• Advise appropriate senior leadership or Authorizing Official of changes affecting the organization's cybersecurity posture.
• Collect and maintain data needed to meet system cybersecurity reporting.
• Communicate the value of information technology (IT) security throughout all levels of the organization stakeholders.
• Collaborate with stakeholders to establish the enterprise continuity of operations program, strategy, and mission assurance.
• Ensure that security improvement actions are evaluated, validated, and implemented as required.
• Ensure that cybersecurity inspections, tests, and reviews are coordinated for the network environment.
• Ensure that cybersecurity requirements are integrated into the continuity planning for that system and/or organization(s).
• Ensure that protection and detection capabilities are acquired or developed using the IS security engineering approach and are consistent with organization-level cybersecurity architecture.
• Establish overall enterprise information security architecture (EISA) with the organization's overall security strategy.
• Evaluate and approve development efforts to ensure that baseline security safeguards are appropriately installed.
• Evaluate cost/benefit, economic, and risk analysis in decision-making process.
• Identify alternative information security strategies to address organizational security objectives.
• Identify information technology (IT) security program implications of new technologies or technology upgrades.
• Interface with external organizations (e.g., public affairs, law enforcement, Command or Component Inspector General) to ensure appropriate and accurate dissemination of incident and other Computer Network Defense information.
• Interpret and/or approve security requirements relative to the capabilities of new information technologies.
• Interpret patterns of noncompliance to determine their impact on levels of risk and/or overall effectiveness of the enterprise's cybersecurity program.
• Lead and align information technology (IT) security priorities with the security strategy.
• Lead and oversee information security budget, staffing, and contracting.
• Manage the monitoring of information security data sources to maintain organizational situational awareness.
• Manage the publishing of Computer Network Defense guidance (e.g., TCNOs, Concept of Operations, Net Analyst Reports, NTSM, MTOs) for the enterprise constituency.
• Manage threat or target analysis of cyber defense information and production of threat information within the enterprise.
• Monitor and evaluate the effectiveness of the enterprise's cybersecurity safeguards to ensure that they provide the intended level of protection.
• Oversee the information security training and awareness program.
• Participate in an information security risk assessment during the Security Assessment and Authorization process.
• Participate in the development or modification of the computer environment cybersecurity program plans and requirements.
• Prepare, distribute, and maintain plans, instructions, guidance, and standard operating procedures concerning the security of network system(s) operations.
• Provide enterprise cybersecurity and supply chain risk management guidance for development of the Continuity of Operations Plans.
• Provide leadership and direction to information technology (IT) personnel by ensuring that cybersecurity awareness, basics, literacy, and training are provided to operations personnel commensurate with their responsibilities.
• Ability to apply techniques for detecting host and network-based intrusions using intrusion detection technologies.
• Ability to integrate information security requirements into the acquisition process; using applicable baseline security controls as one of the sources for security requirements; ensuring a robust software quality control process; and establishing multiple sources (e.g., delivery routes, for critical system elements).
• Ability to identify critical infrastructure systems with information communication technology that were designed without system security considerations.Preferred Qualifications to include:
• Experience in log auditing and audit logging.
• Understanding of AWS
• Help Desk Experience
• ITIL V4 Foundation: A familiarity with at least one ITIL V4 component is desirable.
• Requirements for this position shall include:
• Associate's degree or higher from an accredited college or university (Prefer an accredited Computer Science, Cyber Security, Information Technology, Software Engineering, Information Systems, or Computer Engineering degree, or a degree in a Mathematics or Engineering field.)
• Certs- IAT/ IAM level 3
• About the Organization Established in 2008, RiVidium, Inc. (dba TripleCyber) is a VA-Verified SDVOSB and an SBA-Certified 8(a) company. To prepare our clients for the future, RiVidium has balanced all parts of our organization to attract the finest employees in order to 'Strive to be the missing element defining tomorrow's technology'. RiVidium keeps pace and surpasses its competitors by meeting challenges of advancements in Logistics, Human Capital, Cyber, Intelligence & Technology.
• EOE Statement We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status or any other characteristic protected by law. If you need a reasonable accommodation for any part of the employment process, please contact Human Resources (HR) at . This position is currently accepting applications.