Information Systems Security Manager (ISSM)

CACI; Reston (VA); On-site; USD 87,000 - 182,000; Full time

Job summary

CAC I is seeking an Information Systems Security Manager (ISSM) in Reston, VA to lead system accreditation through development, engineering, integration and testing of the Financial System. The role requires Top Secret clearance and on-site work.

You will collaborate with government Cyber Security teams and enterprise IT staff to secure systems across development and operations. The position emphasizes ATO support, risk management, vulnerability remediation and incident response, with a focus on

Qualifications

• Active Top Secret clearance required or ability to obtain CI polygraph after onboarding.
• Bachelor's degree required; advanced degrees preferred.
• Must have professional information security certifications (CISM, CISSP, FITSP-M, GIAC family).
• 5+ years of experience securing computing environments, including cloud.
• Experience managing security accreditation life cycle under NIST RMF.
• Strong knowledge of information security policies and NIST 800-53.
• 5+ years creating SI/SAP and security-relevant documentation.

Responsibilities

• Support efforts to obtain Authority To Operate and for external IT audits.
• Research and stay current on vulnerabilities, data security and encryption trends.
• Design, develop or recommend secure system solutions aligned with requirements.
• Configure and validate secure systems and test for weaknesses.
• Produce security architecture documentation and risk assessments.
• Develop plans of action to remediate findings and ensure information assurance.
• Grant authorization to operate IT systems at acceptable risk levels.
• Monitor and test IT systems for vulnerabilities and indicators of compromise.
• Lead incident response and security awareness trainings.

Skills

Security policy knowledge

NIST RMF

Vulnerability management

Education

Bachelor's degree

MS or PhD in Information Technology, Cyber Security, Computer Science, Data Science or Software Engineering

Certifications: CISM, CISSP, FITSP-M, GCIH, GCIA, GICSP, GSLC

Tools

CISM

CISSP

FITSP-M

GCIH

GCIA

GICSP

GSLC

Job description

Job Title: Information Systems Security Manager (ISSM)Job Category: Information TechnologyTime Type: Full timeMinimum Clearance Required to Start: Top SecretEmployee Type: RegularPercentage of Travel Required: NoneType of Travel: None* * *

The Opportunity:

You will fulfill the role of Information Systems Security Manager (ISSM) for the Financial System to provide authoritative direction for system accreditation through the development, engineering, integration, and testing of all components of the system.

You will be working with other members of the CACI project team, the Government's Cyber Security team, and the Enterprise Information Technology staff to ensure the security of the system in all environments (development and operations).

Responsibilities:

• You will be supporting efforts to obtain Authority To Operate, external IT audits, continuous monitoring, and for supporting the use of emerging technologies in CACI and customer environments.
• Research and maintain proficiency in tools, techniques, countermeasures, and trends in computer and network vulnerabilities, data hiding and network and device security and encryption.
• Perform duties in support of in-house and external customers. Design, develop or recommend integrated system solutions ensuring proprietary/confidential data and systems are protected in accordance with mandated standards. Participate with the client in the strategic design process to translate security and business requirements into technical designs.
• Configure and validate secure systems, tests security products/systems to detect computer and information security weakness.
• Generates security architecture documentation. Provide critical written and verbal analyses of previously generated security architecture documentation and vulnerability and risk assessments.
• Design and implement plans of action and milestones to remediate findings from vulnerability and risk assessments. Provide information assurance for digital information, ensuring its confidentiality, integrity, and availability.
• Granting of authorization to operate IT systems at acceptable levels of risk
• Monitoring and testing of IT systems for vulnerabilities and indicia of compromise.
• Incident response and remediation, Development of appropriate policy, Relevant user security awareness and training. Compliance with applicable government and other external standards.

Qualifications:

Required:

• Active Top Secret clearance, and willing to obtain a CI polygraph after on-boarding.
• Bachelor's degree
• MS or Ph.D. in Information Technology, Cyber Security or Computer Science, Information Technology, Data Science or Software Engineering. In lieu of lack of the advanced degrees must have one of the certifications listed below.
• Must have the following certifications to be approved for the role: Certified Information Security Manager (CISM) Certified Information Systems Security Professional (CISSP) Federal IT Security Professional-Manager-NG (FITSP-M) GIAC Certified Incident Handler (GCIH) GIAC Certified Intrusion Analyst (GCIA) GIAC Global Industrial Cyber Security Professional (GICSP) GIAC Security Leadership Certification (GSLC)
• Five (5) or more years' experience maintaining the security posture of computing environments, including cloud environments
• Experience managing the full lifecycle of, and workflows for, security accreditation projects under the NIST Risk Management Framework.
• Extensive knowledge of information system security policies, and NIST 800-53 security controls.
• Five (5) or more years' experience creating and maintaining security system plans (SSP) and other security-relevant documentation for computing systems and applications

What You Can Expect:

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you'll be part of a high-performing group dedicated to our customer's missions and driven by a higher purpose - to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You'll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground - in your career and in our legacy.

Pay Range

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is:

$86,600 - $181,800

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.