Information Systems Security Manager

Information Systems Security Manager

Requirements

• Cloud: Amazon Web Services (AWS)
• Plan of Action and Milestones (POA&M)
• RMF
• Xacta (Platform)
• 8 + years of related experience
• US Citizenship Required: Yes
• Education: Bachelors (Computer engineering, Computer Science, Electrical Engineering, Information systems, Information Technology, Cybersecurity, or a closely related discipline)
• Required Technical Skills: Require strong documentation skills to create and update policies, process documentation and procedures
• Experience with ServiceNow, Continuum and other SCAP Compliant tools
• Demonstrated experience with RMF, ICD 503, CNSSI 1253, NIST SP 800-53/53A, and STIGs
• Security Clearance Level: TS/SCI with active polygraph

Responsibilities

• Support customer RMF workflow and processes by proposing, coordinating, implementing and enforcing information system security policies, instructions, standards, and methodologies
• Review and approve customer requests related to accesses, devices, and other authorizations
• Evaluate the impact of network and system changes using RMF processes and approve the changes
• Manage multiple projects throughout Authorization and Accreditation (A&A) process from concept to Authority to Operate (ATO)
• Coordinate with system stakeholders on mitigating system vulnerabilities outlined in POA&Ms
• Ensure compliance with NIST 800-53 controls and relevant cybersecurity standards
• Ensure configuration management for security-relevant IS software, hardware and firmware is maintained and documented
• Ensure system recovery processes are monitored to ensure security features and procedures are properly restored
• Ensure all IS security-related documentation is current and accessible to properly authorized individuals
• Formally notify the appropriate individuals when changes occur that might affect authorization
• Participate in governance and project reviews identified by the customer
• Require strong documentation skills to create and update policies, process documentation and procedures
• Conduct internal audits to ensure compliance with RMF requirements

Preferred Qualifications

• Preferred Certifications: Certified Information Systems Security Professional (CISSP)
• CompTIA Security+
• Certified Information Systems auditor (CISA)
• Certified Information Security Manager (CISM)
• CompTIA Advanced Security Practitioner (CASP+)
• AWS Solutions Architect Associate or Professional