Cyber Security Manager Special Programs

MIT Lincoln Laboratory•Lexington, MA

1d•$152,100 - $205,300•Hybrid

About The Position

The Cybersecurity Manager (Special Programs) reports to the Security Services Department Deputy Chief Information Security Officer (DCISO) and serves as the primary focal point and supervisor for a team of Information System Security Managers (ISSMs) and Information Systems Security Officers (ISSOs) supporting the Laboratory’s primary research sponsor. The manager provides leadership, management, and direction for the Special Programs cybersecurity program, overseeing security principles and policies including the Risk Management Framework (RMF), Joint Special Access Program (SAP) Implementation Guide (JSIG) or its replacement, Intelligence Community Directive 503 (ICD-503), and Security Technical Implementation Guides (STIGs). The role oversees day-to-day team operations, work direction, customer assistance, and development and review of System Security Plans. It manages cybersecurity across an enterprise environment that includes ESXi, Linux, UNIX, Sun, and Windows systems, ensuring systems are operated, maintained, and disposed of appropriately. The manager is accountable for security compliance audits, Government compliance inspection results, and vulnerability assessments, and for ensuring vulnerabilities and Plans of Action and Milestones (POA&Ms) are addressed in a timely manner and requirements are met. The position also oversees configuration management, continuous monitoring, and cybersecurity education, training, and awareness. The manager conducts candidate screening and hiring actions, supports staff retention, and performs supervisory duties including interviews and identifying professional development opportunities. The position may require local and some overnight travel. A current, in-scope Top Secret DoD security clearance with SCI eligibility is specified in the role description; another notice in the posting states that the selected candidate must be able to obtain and maintain a Secret-level DoD security clearance.

Requirements

Bachelor’s degree in computer science, Information Technology, Computer Information Systems, or a related discipline, with a minimum of 10 years of Information Security experience; experience in Special Access and Sensitive Compartmented Information Programs is preferred.
At least 7 years of leadership and supervisory experience in a DoD or Industrial Security environment, with demonstrated security process maturity outcomes.
Demonstrated knowledge and experience with the National Industrial Security Program and detailed understanding of DoD SAP/SCI Community and Intelligence Community requirements and directives.
In-depth knowledge of RMF, JSIG, ICD-503, NIST SP 800-53, and other associated NIST publications.
Technical experience securing multiple operating systems, including Windows Server and clients, Linux, Solaris, and virtualization technologies.
Strong knowledge of network environments and infrastructure products such as routers, switches, Firewall/VPN equipment, and Data Loss Prevention strategies using Endpoint Security solutions.
Ability to establish priorities and work under pressure in a self-directed, multitasking, fast-paced environment.
Demonstrated ability to lead cross-functional teams and present ideas in writing and orally in a collaborative environment.
Demonstrated ability to manage multiple projects or programs and redirect priorities as needed.
Excellent interpersonal communication, organizational, customer service, oral, written, and presentation skills.
Technical experience and skills, coursework completed toward a degree, and industry IT certifications may be considered as substitutes for education requirements.
May require local and some overnight travel.
Must possess and maintain a current, in-scope Top Secret DoD security clearance with SCI eligibility, as stated in the role description. The posting also states that the selected candidate must be able to obtain and maintain a Secret-level DoD security clearance.
U.S. citizenship is required.

Nice To Haves

Experience working as an ISSM for Special Access Programs.
Experience leading cybersecurity teams through multiple Government Core Compliance Inspections (CCIs) with successful scores.
Experience in relationship-building, team building, and communication with Government sponsors.
Cybersecurity management certifications such as CISSP or CISM, or IT auditor certifications such as CISA or GNSA.
Other relevant certifications, including DoD 8140 baseline certifications.

Responsibilities

Lead, manage, and direct the Special Programs cybersecurity program.
Serve as the primary focal point and supervisor for a team of ISSMs and ISSOs supporting the Laboratory’s primary research sponsor.
Oversee application of security principles and policies, including RMF, JSIG or its replacement, ICD-503, and STIGs.
Provide daily oversight, close supervision, and work direction for the team, and provide customer assistance to Laboratory stakeholders.
Oversee development and review of team-produced System Security Plans and ensure systems are operated, maintained, and disposed of appropriately.
Execute and oversee security compliance audits, Government compliance inspections, and security vulnerability assessments on Laboratory and Government information systems.
Ensure vulnerabilities and POA&Ms are addressed in a timely manner and internal governance and external sponsor requirements are met.
Establish and maintain configuration management and continuous monitoring policies and procedures.
Ensure team members participate in cybersecurity education, training, and awareness.
Conduct candidate screening and hiring actions, support retention of assigned personnel, schedule and conduct interviews, and identify staff development opportunities.
Perform other supervisory duties as assigned.