Information Systems Security Manager
$107,900–$195,050 year
On-siteConcord, Massachusetts, United States
Job Summary
Oversee day-to-day information system security operations for SIPRNET enclaves, manage secure communication infrastructure across multiple sites, and resolve complex problems to meet changing security requirements. Coordinate security audits, assessments, and Continuous Monitoring processes to ensure compliance with DoD, U.S. Cyber Command, and JFHQ-DODIN guidance while leading investigations of security violations. Develop and lead Information Security projects from conceptualization to deployment, create comprehensive training programs on information assurance and cybersecurity best practices, and mentor information assurance professionals in secure software development. Manage staff to deliver Cyber Operations and process improvements, ensuring systems are operated and maintained per approved authorization packages.
Required Qualifications
- Active DoD Top Secret clearance
- Bachelor's degree in an IT-related subject matter area from an accredited college or university
- 12+ years of experience in an IT-related position
- At least 10 years being in an operational cyber security-specific role
- 15+ years of experience in an IT related position (alternative path)
- At least 10 of those years in an operational cyber security specific role (alternative path)
- At least 12 years of IT Team leadership and management experience
- 10 years of Cyber management experience (preferred within the 12 years)
- DoD 8570 IAM Level I certified
- Detailed understanding of the Risk Management Framework (RMF)
- National Institute of Standards and Technology (NIST) cyber security requirements and guidance
- Committee on National Security Systems (CNSS) cyber security requirements and guidance
- Cybersecurity-related risk management techniques
- Familiarity with network technologies (LAN & WAN)
- Best practices within a classified environment
- Crypto and key management
- Working knowledge of Microsoft Windows (workstation & server)
- Working knowledge of Linux operating systems in a secure network environment
- Experience with compliance scanning tools
- Experience with vulnerability scanning tools (e.g., Tenable)
- Ability to work in a constantly changing regulatory environment
- Short-, mid-and long-term timelines for remediating any non-compliance
- Ability to work well within a team environment
- Adapt quickly to change
- Excellent verbal and written communication skills
- Past or current ISSM/ISSO experience
- Extensive experience with Secret Internet Protocol Router Network (SIPRNet) enclaves
- Extensive experience with SIPRNet enclaves and governing policies
- Must be able to lift 50 lbs
Desired Qualifications
- Proficient in using Microsoft Windows and Linux operating systems
- Cloud computing
- Experience with developing policies, procedures, and guidance to include providing artifacts for the RMF process
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.