Information System Security Manager II

Global Resource Solutions, Inc.•Fort Walton Beach, FL

About The Position

The Information System Security Manager II provides day-to-day information systems security support for Collateral, Sensitive Compartmented Information (SCI), and Special Access Program (SAP) activities supporting Department of Defense agencies. The role works within SAPs and supports efforts involving organizations such as HQ Air Force and the Office of the Secretary of Defense. It oversees information systems security programs, authorization activities, assessments, risk management, incident response, training, and system security throughout the system life cycle. The position also supports integration of existing SAP network infrastructures, coordinates security inspections and reviews, maintains authorization documentation, and provides research, analysis, leadership, mentoring, and quality assurance for team members. The role requires interaction with government, military and civilian personnel, and industry partners, as well as travel within the organizational geographic area of responsibility.

Requirements

Seven to nine years of related experience.
Bachelor’s degree in a related area or equivalent experience; four years of experience may be considered equivalent.
Meet the position and certification requirements outlined in DoD Directive 8570.01-M for Information Assurance Technician Level 3 within six months of hire.
Current Top Secret clearance with SCI eligibility.
Eligibility for access to Special Access Programs.
Willingness to submit to a Counterintelligence Polygraph.
Ability to work in a dynamic environment and interact effectively with DoD personnel, military and civilian personnel, and industry partners.
Working knowledge of Microsoft Office, including Word, PowerPoint, and Excel.
High degree of originality, creativity, and initiative, with the ability to work with minimal supervision.
Familiarity with security policies and manuals, appropriate DCIDs/JAFANs, and other guiding policy documents.
Willingness and ability to travel within the organizational geographic Area of Responsibility; travel could be extensive and include air and ground transportation.
Ability to lift up to 50 pounds.
Ability and willingness to sit, bend, reach, stoop, squat, stand, and walk.
Excellent customer service in phone and face-to-face conversations, and excellent written and oral English communication skills.

Responsibilities

Oversee development, implementation, and evaluation of information system security program policy, with emphasis on integrating existing SAP network infrastructures.
Analyze network security using RMF or JAFAN authorization processes and advise customers on IT assessment and authorization issues.
Perform risk assessments and make recommendations to customers.
Advise government program managers on security testing methodologies and processes.
Evaluate assessment documentation and provide written authorization recommendations to government program managers.
Periodically review system security to address changes in policy or technology.
Develop and maintain a formal Information Systems Security Program.
Ensure IAOs, network administrators, and other AIS personnel receive the technical and security training necessary to perform their duties.
Develop, review, and endorse system assessment documentation and recommend action by the AO or DAO.
Ensure approved procedures are in place for clearing, purging, declassifying, and releasing system memory, media, and output.
Conduct assessment tests to verify that required protection-level features and assurances are functional.
Maintain a repository of system authorization documentation and modifications.
Coordinate AIS security inspections, tests, and reviews.
Develop policies and procedures for responding to security incidents and investigating and reporting security violations and incidents.
Ensure proper protection or corrective measures are taken when an incident or vulnerability is discovered within a system.
Ensure data ownership and responsibilities are established for each AIS, including accountability, access rights, and special handling requirements.
Develop and implement an information security education, training, and awareness program, including attending, monitoring, and presenting local AIS security training.
Ensure security assessments are completed and documented.
Evaluate threats and vulnerabilities to determine whether additional safeguards are needed.
Assess changes in systems, their environments, and operational needs that could affect authorization.
Ensure authorization is accomplished for each AIS.
Review AIS assessment plans and conduct periodic assessments of AIS security posture.
Ensure configuration management for security-relevant AIS software, hardware, and firmware is properly documented.
Monitor system recovery processes to ensure security features and procedures are properly restored.
Ensure AIS authorization documentation is current and accessible to properly authorized individuals.
Ensure system security requirements are addressed throughout all phases of the system life cycle.
Participate in self-inspections, identify security discrepancies, and report security incidents.
Coordinate technical security issues outside the role's area of expertise or responsibility with SSE.
Provide expert research and analysis in support of expanding programs and areas of responsibility.
Perform file transfers between local systems and storage devices.
Provide leadership, mentoring, and quality assurance for team members.