IA Technical Director

Agile Defense•Norfolk, VA

20d•Onsite

About The Position

At Agile Defense we know that action defines the outcome and new challenges require new solutions. That’s why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next. Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility—leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation’s vital interests. Requisition #: 1234 Job Title: IA Technical Director Location: 471 East C Street Norfolk, Virginia 23511 Clearance Level: Active DoD - Secret Required Certification(s): DoD IAM Level II Certification. Certified Authorization Professional (CAP), CompTIA Advanced Security Practitioner (CASP+) CE, Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP) or Associate, GIAC Security Leadership Certification (GSLC) or Higher-level certification. SUMMARY Provide the Military Sealift Command (MSC) Business Systems Branch with program management, systems engineering, software development and integration, advanced data services, and customer focused operational support. As technology evolves, introduce emerging technologies, embrace forward-looking strategies, and implement new and/or significant enhancements to existing Business Systems. The ISSO Team Lead protects all MSC Business Systems information and information systems in a manner that is commensurate with the national security classification level, sensitivity, value, and criticality of the information, including protecting MSC Business Systems information from unauthorized disclosure, destruction, or modification while the information is being collected, processed, transmitted, stored, or disseminated. JOB DUTIES AND RESPONSIBILITIES The ISSO Team Lead support includes: Managing the security of all IT through the complete system development life cycle, that is acquired, developed, or used. Managing the security of all information systems in a cost-effective manner, guided by the application of sound risk management processes that ensure a level of confidentiality, integrity, and availability of information in each phase of the system development life cycle. Conducting periodic assessments and reviews to verify compliance with applicable DoD, DoN and MSC policies that process, store, or transmit MSC Business Systems data. Investigating information security incidents through incident management and forensic investigation and develop after action reports following significant incidents to address security issues and improve future response efforts. Implementing security policy best practices and guidance outlined by DoD Instruction 8510.01 , NIST Special Publication (SP) 800 Series and FIPS. Ensure all information systems operating within the MSC Business Systems environment are operating under a valid Authorization to Operate (ATO) and perform continuous monitoring efforts. Ensuring MSC systems Adhere to Federal Information Security Modernization Act (FISMA) and other Federal laws, related policies, procedures, standards, and guidelines on unclassified information security systems. Ensure that information security management processes are integrated with MSC Business Systems strategic and operational planning processes. Periodically testing and evaluating information security controls and techniques to ensure that they are effectively implemented. Developing and maintaining an MSC Business Systems information security program. Training and overseeing personnel with responsibilities for information security.

Requirements

DoD IAM Level II Certification.
Certified Authorization Professional (CAP), CompTIA Advanced Security Practitioner (CASP+) CE, Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP) or Associate, GIAC Security Leadership Certification (GSLC) or Higher-level certification.
Bachelor’s Degree in Cybersecurity, Computer Science, Engineering or Math
At least five years of DoD and/or DoN Information Technology and Cybersecurity experience with at least five years of experience managing information security personnel.
At least three years of experience with Risk Management, Cybersecurity Management, Security Models and Access Controls, Network Protocols, Cybersecurity Architecture, Software Development Security and Database Security for DoD or DoN programs.

Responsibilities

Managing the security of all IT through the complete system development life cycle, that is acquired, developed, or used.
Managing the security of all information systems in a cost-effective manner, guided by the application of sound risk management processes that ensure a level of confidentiality, integrity, and availability of information in each phase of the system development life cycle.
Conducting periodic assessments and reviews to verify compliance with applicable DoD, DoN and MSC policies that process, store, or transmit MSC Business Systems data.
Investigating information security incidents through incident management and forensic investigation and develop after action reports following significant incidents to address security issues and improve future response efforts.
Implementing security policy best practices and guidance outlined by DoD Instruction 8510.01 , NIST Special Publication (SP) 800 Series and FIPS.
Ensure all information systems operating within the MSC Business Systems environment are operating under a valid Authorization to Operate (ATO) and perform continuous monitoring efforts.
Ensuring MSC systems Adhere to Federal Information Security Modernization Act (FISMA) and other Federal laws, related policies, procedures, standards, and guidelines on unclassified information security systems.
Ensure that information security management processes are integrated with MSC Business Systems strategic and operational planning processes.
Periodically testing and evaluating information security controls and techniques to ensure that they are effectively implemented.
Developing and maintaining an MSC Business Systems information security program.
Training and overseeing personnel with responsibilities for information security.