Information Systems Security Manager
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Location: Hybrid in Fort Meade, Maryland; candidates must reside within commuting distance and work onsite at Fort Meade two days per week, with additional onsite support as mission requirements dictate.
Salary: $150,000+ annually. Final compensation depends on experience, clearance, certifications, technical skills, contract requirements, and qualifications.
Company
provides consulting, technology solutions, and professional services to U.S. government, defense, and intelligence organizations.
What you will do
- Lead cybersecurity governance, risk management, RMF implementation, system authorization, and compliance activities for information systems, applications, networks, and mission environments.
- Develop, maintain, and review authorization packages and documentation, including SSPs, SARs, POA&Ms, and supporting artifacts.
- Oversee continuous monitoring, vulnerability management, remediation, security control assessments, inspections, audits, and authorization readiness reviews.
- Evaluate cybersecurity risks and recommend mitigation strategies, compensating controls, corrective actions, and security safeguards.
- Coordinate with ISSOs, system owners, engineers, assessors, Authorizing Officials, Government stakeholders, and cybersecurity leadership.
- Assess emerging technologies, including AI, autonomous systems, cloud environments, prototypes, pilot programs, and experimental capabilities; provide technical guidance and mentorship to cybersecurity personnel.
Requirements
- U.S. citizenship is required.
- An active DoD Secret security clearance is required, with the ability to obtain a DoD Top Secret clearance. The required customer-specific access and credentials must be obtained and maintained.
- A bachelor's degree is required.
- At least one current certification recognized for DoD 8140 Work Role 722, Information Systems Security Manager (ISSM), Intermediate level, is required: CISSP, CISM, CGRC/CAP, SecurityX/CASP+, Security+, CCSP, or GSEC.
- 5–10 years of relevant experience in cybersecurity, information assurance, RMF, risk management, or security compliance.
- Experience supporting RMF implementation, system authorization activities, cybersecurity governance, and the development, review, or management of authorization packages and security documentation.
- Strong understanding of cybersecurity risk assessment, vulnerability management, security controls, and remediation processes.
- Knowledge of DoDI 8510.01, NIST SP 800-53, NIST SP 800-37, applicable CNSSI requirements, and DISA STIGs.
- Strong analytical, leadership, communication, technical documentation, coordination, and prioritization skills in a dynamic mission environment.
Nice to have
- Current DoD Top Secret clearance.
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, Information Systems, or a related field.
- Experience supporting DoD, DISA, or other federal Government cybersecurity environments.
- Experience supporting authorization activities for cloud platforms, emerging technologies, prototypes, or pilot programs.
- Experience providing technical oversight or mentorship to cybersecurity personnel.
Culture & Benefits
- 26 days of paid leave, including vacation, sick, personal time, and holidays.
- Performance bonuses based on individual contributions and company-wide results.
- 401(k) with a 3% company match and immediate vesting.
- Medical, dental, vision, FSA, HSA, life insurance, parental leave, and military differential pay.
- Paid training and certifications, tuition reimbursement, and professional development support.
- Employee participation in long-term company value through a commitment to return 80% of net sale proceeds to employees.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →