Senior Information Security Manager – RMF & DoD Systems

Arenatechnologies; San Diego, Northern (CA, KY); Hybrid; USD 150,000 - 185,000; Full time

Job summary

Systems Planning and Analysis, Inc. (SPA) in California is seeking an Information Systems Security Manager (ISSM) to lead cybersecurity operations for multiple classified systems and to drive RMF-based authorizations across DoD networks.

You will manage RMF artifacts, develop SSPs, and coordinate with DoD agencies while maintaining strict security controls. A DoD 8570 IAM III certification and a TS/SCI clearance are required.

Qualifications

• Bachelor's Degree in Information Security, Information Technology, or related discipline, or equivalent experience/combined education, with 10+ years of related professional experience
• Must hold DoD 8570.01-M IAM level III certification (e.g. GSLC, CISM, CCISO, or CISSP)
• Experience with RMF artifacts, obtaining and maintaining system ATOs, and implementing new and complex technologies at multiple classification levels
• Experience performing continuous monitoring and cybersecurity hygiene of Windows domains and network enclaves
• Experience with Linux operating systems in a Windows Domain
• Problem solving and time management capabilities
• Extensive experience with federal/government agencies in sensitive and classified environments
• Experience with RMF, NIST 800-53, JSIG, and applicable legal and regulatory guidance
• Excellent customer relations and customer support skills
• Experience working in a team-oriented, collaborative environment
• Currently hold an active TS/SCI clearance and the ability to maintain it throughout employment

Responsibilities

• Lead a team of Cybersecurity professionals in the day-to-day cybersecurity and operations of multiple classified systems
• Manage and mentor personnel
• Develop and maintain enterprise-wide RMF information security policies, standards, guidelines, procedures, and artifacts following RMF
• Oversee the development and deployment of the information security program for multiple classified systems to meet business and enterprise requirements, policies, standards, guidelines and procedures
• Prepares, reviews, and presents technical reports and briefings
• Create and Maintain the System Security Plans (SSP) and associated documentation
• Create a book of business for Cybersecurity Team
• Maintain compliance of accredited information systems based on federal and DoD security standards
• Manages and performs security compliance continuous monitoring
• Identifies root causes, prioritizes threats and recommends and/or implements corrective action
• Researches and addresses information security issues as required as an authority on the subject
• Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices
• Participate in internal and external security audits and inspections; performs risk assessments
• Evaluate proposed changes or additions to the information system and assess their security relevance
• Ensure configuration management (CM) for security-relevant IS software, hardware, and firmware is maintained and documented
• Conduct investigations of computer security violations and incidents, reporting as necessary
• Ensure proper protection and / or corrective measures have been taken when an incident or vulnerability has been discovered
• Communicate, implement, and manage a formal Information Security / Information Systems Security Program together with ISSE, CPSO/CSSO, and ISO
• Integrate lessons learned and security control policies, procedures, and artifact generation best practices with peer ISSM/ISSE
• Contributor to the design, procurement, build, accreditation, and deployment of complex networks and systems in coordination with the ISSE and ISAs
• Manage cyber budgets to include hardware, software, and resources
• Receive and respond to incoming calls and/or e-mails regarding end-user or system problems
• Interface with third-party support and equipment vendors as needed
• Up to 20% travel required

Skills

RMF

NIST 800-53

DoD 8570 IAM III

Clearance TS/SCI

Linux

Windows domains

Problem solving

Team collaboration

Communication

Cybersecurity

Education

Bachelor's Degree in Information Security/IT or related

Tools

Windows domains

Linux

VDI

Job description

Systems Planning and Analysis, Inc. (SPA) in California is seeking an Information Systems Security Manager (ISSM) to lead cybersecurity operations for multiple classified systems and to drive RMF-based authorizations across DoD networks.

You will manage RMF artifacts, develop SSPs, and coordinate with DoD agencies while maintaining strict security controls. A DoD 8570 IAM III certification and a TS/SCI clearance are required.