Cybersecurity – Information System Security Manager (ISSM)
$121,550–$164,450 year
On-siteOklahoma City, Oklahoma, United States
Job Summary
Develop and deploy program information security for assigned systems to meet enterprise requirements, policies, standards, and guidelines. Implement Risk Management Framework (RMF) processes, conduct continuous monitoring, and perform security assessments and audits. Prepare technical reports, identify root causes of threats, and recommend corrective actions. Provide mentoring and technical leadership within the information security program team while exploring evolving industry knowledge and methods. Support development of enterprise-wide information security policies and ensure compliance with DFARS and Cybersecurity Maturity Model Certification (CMCC) requirements. Maintain active U.S. Top Secret Security Clearance and hold a valid CISSP, GSLC, or CISM certification.
Required Qualifications
- Successfully completed Tier 5 Investigation (T5), formerly known as a Single Scope Background Investigation (SSBI) by the federal government within the last 5 years, or requires candidate to have been enrolled in a Continuous Vetting program within the last 5 years
- Currently hold certification in good standing to satisfy IAM Level III (CISSP, GSLC, or CISM)
- 5+ years of experience in cybersecurity policies and implementation of Risk Management Framework (RMF): e.g. DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series
- Must satisfy the Company's Conflict Of Interest (COI) assessment process
- Subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies
- Active U.S. Top Secret Security Clearance (U.S. Citizenship Required)
- A U.S. Security Clearance that has been active in the past 24 months is considered active
- Must meet U.S. export control compliance requirements
- Must be a 'U.S. Person' as defined by 22 C.F.R. §120.62 (U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee)
Desired Qualifications
- 5+ years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs
- 5+ years of experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS
- 5+ years of experience assessing and documenting test or analysis data to show cyber security compliance
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.