Information Systems Security Manager (ISSM) I

General Dynamics IT; Bedford (MA); On-site; USD 95,000 - 130,000; Full time

Job summary

General Dynamics IT seeks an Information Systems Security Manager I in Bedford, MA. The ISSM will advise on security of information systems, supporting collateral, SCI, and SAP activities, with RMF-focused policy development and risk assessments.

The role requires 5+ years in related roles such as ISSO/ISSM; SAP experience is preferred. A relevant degree or equivalent experience is required. Top Secret/SCI clearance is mandatory, with polygraph eligibility as noted.

Qualifications

• 5+ years of related experience in ISSO/ISSM roles.
• SAP experience desired for security management.
• Bachelor's or equivalent in a related discipline.

Responsibilities

• Oversight of information system security program policy and RMF integration.
• Advise on RMF assessment and authorization issues for DoD customers.
• Develop and maintain an Information Systems Security Program.
• Coordinate with PSO on external information systems approval.
• Ensure training for IAOs and cyber security personnel.

Skills

Cybersecurity

Information Security

Information System Security

Security Evaluations

Education

Bachelor's degree in related discipline

Associate's degree in related area + 2 years' experience

Tools

IAT Level II

Job description

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

Top Secret/SCI

Clearance Level Must Be Able to Obtain:

Top Secret SCI + Polygraph

Public Trust/Other Required:

None

Job Family:

Cyber and IT Risk Management

Job Qualifications:

Skills:

Cybersecurity, Information Security, Information System Security, Security Evaluations Certifications:

None Experience:

5 + years of related experience US Citizenship Required:

Yes

Job Description:

Location: Bedford, MA

Information Systems Security Manager (ISSM) I

The ISSM's primary function serves as a principal advisor on all matters, technical and otherwise, involving the security of information systems under their purview. The position will provide "day-to-day" support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities.

Performance shall include:

• Perform oversight of the development, implementation and evaluation of information system security program policy; special emphasis placed upon integration of existing SAP network infrastructures.
• Develop and oversee operational information systems security implementation policy and guidelines of network security, based upon the Risk Management Framework (RMF) with emphasize on Joint.
• Special Access Program Implementation Guide (JSIG) authorization process.
• Advise customer on Risk Management Framework (RMF) assessment and authorization issues.
• Perform risk assessments and make recommendations to DoD agency customers.
• Advise government program managers on security testing methodologies and processes.
• Evaluate authorization documentation and provide written recommendations for authorization to government PMs.
• Develop and maintain a formal Information Systems Security Program.
• Ensure that all IAOs, network administrators, and other cyber security personnel receive the necessary technical and security training to carry out their duties.
• Develop, review, endorse, and recommend action by the AO or DAO of system assessment documentation.
• Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media.
• Develop and execute security assessment plans that include verification that the features and assurances required for each protection level functioning.
• Maintain and/or applicable repository for all system authorization documentation and modifications.
• Institute and implement a Configuration Control Board (CCB) charter.
• Develop policies and procedures for responding to security incidents, to include investigating and reporting security violations and incidents.
• Ensure proper protection or corrective measures have been taken when an incident or vulnerability has been discovered within a system.
• Ensure that data ownership and responsibilities are established for each authorization boundary, to include accountability, access rights, and special handling requirements.
• Ensure development and implementation of an information security education, training, and awareness program, to include attending, monitoring, and presenting local cyber security training.
• Evaluate threats and vulnerabilities to ascertain whether additional safeguards are needed.
• Assess changes in the system, its environment, and operational needs that could affect the authorization.
• Ensure that authorization is accomplished a valid Authorization determination has been given for all authorization boundaries under your purview.
• Review AIS assessment plans.
• Coordinate with PSO or cognizant security official on approval of external information systems (e.g., guest systems, interconnected system with another organization)
• Conduct periodic assessments of the security posture of the authorization boundaries.
• Ensure configuration management (CM) for security-relevant changes to software, hardware, and firmware and that they are properly documented.
• Ensure periodic testing is conducted to evaluate the security posture of IS by employing various intrusion/attack detection and monitoring tools (shared responsibility with ISSOs)
• Ensure that system recovery and reconstitution processes developed and monitored to ensure that the authorization boundary can be recovered based on its availability level determination.
• Ensure all authorization documentation is current and accessible to properly authorized individuals.
• Ensure that system security requirements are addressed during all phases of the system life cycle.
• Develop Assured File Transfers (AFT) on accordance with the JSIG.
• Participate in self-inspections.
• Conduct the duties of the Information System Security Officer (ISSO) if one is not present and/or available.

Experience:

5+ years related experience.

Prior performance in roles such as ISSO or ISSM.

SAP experience desired

Education:

Bachelor's degree in related discipline OR Associate's degree in a related area + 2 years' experience OR equivalent experience (4 years)

Certifications:

IAT Level II (Security+ CE, CCNA Security,