RMF Information Security Manager III - Cyber Risk Lead

ARGO Cyber Systems, LLC; Arlington (VA); Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision

401K plan

Equal Opportunity Employer

Job summary

ARGO Cyber Systems is seeking an experienced Information Security Manager III to oversee the Risk Management Framework lifecycle for IT systems and coordinate DHS IT security standards. This on-site/hybrid role requires US citizenship and an active TS/SCI clearance.

You will work with ISSMs, CISOs, and senior stakeholders to guide risk assessments and maintain ATO readiness. Candidates should have 5+ years in information security management, RMF, NIST, and security controls experience, and be

Qualifications

• U.S. Citizenship is required.
• Bachelor's degree with 5+ years of directly relevant experience in information security management.
• OR High School Diploma and 7+ years of information security management experience.
• Hands on experience with Linux operating systems or Amazon Web Services.
• Experience supporting the NIST Risk Management Framework (RMF) process and contributing to a full ATO effort from initiation through authorization, including development of security documentation, control implementation statements, supporting assessment (audit) activities, and performing full POA&M management.
• Beginning to end Knowledge of RMF and Assessment and Authorization (A&A) documentation to include SSP, Contingency, Incident & Configuration Mgmt planning and execution.
• Experience working on multiple complex assignments which are broad in nature, requiring originality and innovation in determining how to accomplish tasks.
• Ability to apply a comprehensive knowledge across key tasks and high impact assignments.
• Knowledge of Computer Network Defense (CND) policies, procedures & regulations.
• Knowledge of defense-in-depth principles and network security architecture.
• Knowledge of ATO requirements and strong experience with POAMs.
• Knowledge and experience with full range of Microsoft Office products (Word, Excel, Powerpoint, and Visio).
• Knowledge of boundary protection and network segmentation
• Knowledge of authentication and access management techniques
• Experience with implementing and assessing security controls for hardware, software, and network deployments
• Must be able to work collaboratively with internal and external stakeholders across physical locations

Responsibilities

• Work as part of a team of Information Assurance professionals to manage the full Risk Management Framework lifecycle for Information Technology systems
• Assisting technical/management leadership on major tasks or technology assignments
• Establishing goals and plans that meet project objectives
• Assisting in direction and control activities, having overall responsibility for security management, methods, and staffing to ensure that technical requirements are met
• Participating in client negotiations and interfacing with senior management
• Supporting decision making and domain knowledge that may have a critical impact on overall project implementation
• Providing support to plan, coordinate, and implement a cybersecurity lab's information security
• Providing support for facilitating and helping the lab identify its current security infrastructure and define future programs, design and implementation of security related to lab systems
• Assisting the efforts of security staff to design, develop, engineer and implement solutions to security requirements
• Implementing and development of the DHS IT security standards
• Gathering and organizing technical information about the lab's mission goals and needs, existing security products, and ongoing programs
• Performing risk analyses which also includes risk assessment
• Planning and leading major technology assignments
• Evaluating performance results and recommends major changes affecting short-term project growth and success
• Functioning as a cyber technical expert across multiple project assignments
• Working closely with ISSM and CISO to respond to Data Calls and satisfy requirements of ATOs

Skills

RMF lifecycle

NIST RMF/A&A

CND policies

Network security architecture

POAM management

Stakeholder collaboration

Security controls implementation

Linux / AWS familiarity

Education

Bachelor's degree + 5+ years

High School Diploma + 7+ years

Tools

CSAM/Xacta/Archer/RegScale

Nessus/Security Center/Tenable

nmap/Wiz/burp

CrowdStrike/CarbonBlack

Splunk/SOAR/ELK

Python/AWS CLI/Lambda/Bash/PowerShell

Job description

ARGO Cyber Systems is seeking an experienced Information Security Manager III to oversee the Risk Management Framework lifecycle for IT systems and coordinate DHS IT security standards. This on-site/hybrid role requires US citizenship and an active TS/SCI clearance.

You will work with ISSMs, CISOs, and senior stakeholders to guide risk assessments and maintain ATO readiness. Candidates should have 5+ years in information security management, RMF, NIST, and security controls experience, and be