Information System Security Manager (ISSM) - Level 4

Develop and maintain formal IS security programs, policies, and guidelines for operational environments while coordinating with security officials on external system approvals. Oversee operational security implementation, ensuring ISSOs are appointed and follow established procedures, and assume ISSO responsibilities during absences. Monitor resources for vulnerabilities and attacks, conduct periodic security testing, and enforce sanitization procedures for system components. Maintain a repository of cybersecurity documentation, including ATOs, and coordinate inspections, tests, and reviews with proper incident response. Execute continuous monitoring plans, manage configuration management policies for hardware and software changes, and serve as a voting member of the Configuration Control Board. Manage relationships with ISOs, AOs, and SCA to provide guidance to the broader cybersecurity team.