Information Assurance Manager

SciTec•Princeton, NJ

12h•$160,000 - $200,000

About The Position

SciTec is a dynamic small business, with the mission to deliver advanced sensor data processing technologies and scientific instrumentation capabilities in support of National Security and Defense, and we are growing our creative team! We support customers throughout the Department of Defense and U.S. Government in building innovative new tools to deliver unique world-class data exploitation capabilities. Important Notice: SciTec exclusively works on U.S. government contracts that require U.S. citizenship for all employees. SciTec cannot sponsor or assume sponsorship of employee work visas of any type. Further, U.S. citizenship is a requirement to obtain and keep a security clearance. Applicants that do not meet these requirements will not be considered. SciTec has an immediate opening for an Information Assurance Manager to lead, build, and mentor the team responsible for ensuring that all information systems and associated data meet the required security, compliance, and risk management standards mandated by federal law and agency-specific regulations. The Information Assurance Manager will lead and manage the cybersecurity and compliance activities in support of our programs and will be responsible for ensuring all information systems maintain compliance with applicable cybersecurity policies, including RFP, NIST SP 800-53, DoD 8500.01/8522.02, and other customer directed requirements. The Information Assurance Manager will serve as a key interface between security, engineering, IT, operations, and customer stakeholders.

Requirements

Active DoD Secret or higher security clearance
Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or other other related field. Equivalent experience may be considered.
At least 10 years of relevant experience in information assurance, cybersecurity compliance, or risk management within a federal or DoD contracting environment
Demonstrated ability to lead and mentor teams, develop skills, set goals and drive accountability, and effectively manage and engage stakeholders
A CISSP, CAP, CISM, GSLC, or an alternate qualifying certification satisfying DoD 8570.01M requirements for an Information Assurance Manager Level II
Demonstrated knowledge of RMF, NIST 800-171, NIST 800-53, FISMA, and other federal cybersecurity frameworks
Hands-on experience with eMASS, ACAS, HBSS, and other DoD security tools
Strong written and verbal communcation skills, including the ability to interface with technical and non-technical stakeholders
Incident response and reporting experience, including experience with DCSA
Direct experience with CMMC Level 2 implementation

Nice To Haves

Prior experience as an ISSM or Security Control Accessor (SCA)

Responsibilities

Lead the implementation and maintenance of cybersecurity policies, standards, and procedures to ensure compliance with DoD, NIST, and FISMA requirements
Manage and lead a diverse, multi-location Information Assurance team while supporting their optimal performance and growth
Manage system accreditation processes under RMF, including development of System Security Plans (SSPs), POA&Ms, Security Assessment Reports (SARs), and continuous monitoring strategies
Lead the design and oversee the implementation of secure network architectures
Coordinate with system owners, engineers, ISSM/ISSO, IT, and other stakeholders to manage security controls and system authorizations
Collaborate with IT, DevOps, and physical security to remediate findings from security assessments and continuously improve the organization's security posture.
Support incident response activities and ensure timely reporting of cybersecurity incidents per government policy
Lead tabletop exercises simulating incident response, simulating cyber incidents, identifying procedural gaps, evaluate response capabilities, and improve cross-functional readiness
Conduct threat modeling to identify and assess cybersecurity ricks, prioritize mitigation efforts, and advise stakeholders on protective strategies
Manage and lead red-teaming and penetration testing activities, including planning, execution, and reporting to uncover vulnerabilities and ensure network resilience
Ensure system configurations comply with DISA STIGs and DoD Security Technical Implementation Guides
Conduct security impact assessments and risk assessments on proposed system changes
Provide regular status reports and briefings to senior management and government stakeholders
Participate in internal and external security audits and assessments
Stay current on emerging threats, vulnerabilities, and technologies relevant to government cybersecurity
Other duties as assigned