(179) Senior Information System Security Manager - Pipeline

View full description

Requirements:

• Must have an active TS/SCI Clearance.
• Bachelor’s degree in computer science/information technology, or other related degree fields (Master’s Degree is preferred or at least 10 years of related experience).
• At least 10+ years of cybersecurity experience including a senior technical or management role.
• At least one IAT/IAM or equivalent security certifications ex. CISSP, CCSP, CISM, CISA, or CASP.
• Experience working with OSD leadership or Military component or branch.
• Expert understanding of NIST 800 series guidelines, DoDI 8500.01, DoD 8140.03, rISO 27001, COBIT, DoD RMF, OVL, and current cybersecurity best practices.
• Excellent communication/presentation skills briefing senior military and government civilian leadership.
• Experienced with writing policies, guides, procedures.
• Experience in hands-on with eMASS, Xacta and/or other GRC tools.
• Experience with Federal and FedRamp A&A Processes.
• Experienced and comfortable advising at the Senior Executive Service (SES) level of customers.

Responsibilities:

• Utilize expert knowledge and experience regarding risk management strategies in support of a major DoD program.
• Collaborate between the Cyber Risk Assessor/Security Control Assessor and the program as well as DoD senior leadership.
• Develop and implement security policies, procedures, and guidelines to ensure compliance with applicable laws, regulations, and industry best practices.
• Conduct risk assessments and identify potential vulnerabilities and threats to information systems.
• Develop and implement risk mitigation strategies and controls to minimize the impact of security incidents.
• Collaborate with system administrators, network administrators, and other stakeholders to plan and implement security measures for information systems.
• Develop and implement incident response procedures to reconstitute system operations to address security incidents and breaches.
• Ensure compliance with relevant security standards, regulations, and frameworks.
• Conduct periodic security audits and assessments to evaluate the effectiveness of security controls and identify areas for improvement.
• Maintain accurate and up-to-date security documentation, including security plans, risk assessments, and incident reports.
• Provide regular reports to the Government customer on the status of information security and any identified risks or vulnerabilities.