Information Systems Security Manager (ISSM)

ITCON Services; Washington (District of Columbia); On-site; USD 90,000 - 130,000; Full time

Job summary

A cybersecurity firm is looking for a motivated Information Systems Security Manager (ISSM) to enhance their cybersecurity measures. The role involves developing security policies, managing risk, conducting audits, and ensuring compliance with industry regulations like NIST and DoD. Candidates must have experience with FMCSA regulations and will lead a team in overseeing day-to-day security operations. This position demands strong leadership and technical expertise in cybersecurity management.

Qualifications

• Experience with FMCSA regulations is essential.
• Ability to conduct audits and manage compliance requirements.
• Experience in managing security operations for information systems.

Responsibilities

• Develop and maintain security policies and procedures.
• Conduct risk assessments and vulnerability audits.
• Oversee day-to-day security operations of information systems.
• Manage and maintain security authorizations.
• Lead incident response efforts and training programs.
• Provide technical advice related to security matters.
• Coordinate with government agencies and stakeholders.

Skills

Cybersecurity posture management

Risk management

Policy development

Incident response

Job description

ITCON Services is looking for a bright, motivated Information Systems Security Manager (ISSM) with FMCSA (Federal Motor Carrier Safety Administration) experience to join our team.

An Information Systems Security Manager (ISSM) is responsible for the overall cybersecurity posture of information systems and programs, ensuring the confidentiality, integrity, and availability of data and protecting against threats. This role involves developing and implementing security policies, managing risk, conducting audits, overseeing security documentation like System Security Plans (SSPs), and ensuring compliance with relevant regulations and frameworks such as the Risk Management Framework (RMF).

Key Responsibilities of an ISSM:

• Policy and Documentation Management:
  • Develop, implement, and maintain information systems security policies and procedures, including creating and updating SSPs, Risk Assessment Reports, and other security documentation for various systems, often under government and Intelligence Community (IC) frameworks.
• Risk Management and Compliance:
  • Identify and assess risks, conduct vulnerability audits, and ensure compliance with government regulations, industry standards (e.g., NIST, DoD, FIPS), and customer requirements. This includes managing the RMF lifecycle for systems.
• System Security Operations:
  • Oversee the day-to-day security operations of information systems, including managing security patching, antivirus updates, and media control, and ensuring proper security controls are implemented and followed.
• Accreditation and Authorization:
  • Manage and maintain security authorizations, including the acquisition and renewal of Authorization to Operate (ATO).
• Incident Response and Training:
  • Lead crisis units during security incidents and conduct security briefings, education, and training for employees to raise awareness of cybersecurity challenges and prevention measures.
• Technical Oversight:
  • Provide technical and procedural advice on security matters, review security tool reports, and support security engineering projects.
• Leadership and Coordination:
  • Lead and manage teams of Information System Security Officers (ISSOs), coordinate with various government agencies and stakeholders, and act as the primary cybersecurity authority for their assigned systems or programs.