Information System Security Manager (ISSM), Lead

Semper Valens Solutions•Fort Belvoir, VA

1d•Onsite

About The Position

Semper Valens Solutions is seeking a skilled and experienced Information System Security Manager (ISSM), Lead to provide subject matter proficiency for the work described in the task. This is a full-time, on-site position in Fort Belvoir, Virginia, contingent upon award. An active Top Secret clearance is required. The ISSM serves as the principal advisor on information system security and evaluates, monitors, and ensures the adequacy of cybersecurity posture. The position supports multiple classification levels, from Unclassified through SAP, and requires in-depth knowledge of the Risk Management Framework (RMF), cybersecurity frameworks, eMASS, security authorization, NIST 800-53 controls, security policy development, and risk assessments. Semper Valens Solutions, Inc. is a Service-Disabled Veteran-Owned Small Business (SDVOSB) providing software and systems engineering, field support, training, and full life-cycle support management to the Department of Defense and Veterans Affairs communities. The company describes its vision as delivering creative, cutting-edge, cost-effective solutions by combining shared intellect, industry experience, and technology excellence. Its solutions help bridge IT and business priorities to optimize budgets, risks, and operational processes.

Requirements

Must possess an active Top Secret clearance.
In-depth knowledge of the Risk Management Framework (RMF) and cybersecurity frameworks.
Experience with eMASS and security authorization.
Knowledge of NIST 800-53 controls.
Experience developing security policies and procedures.
Ability to conduct risk assessments.
Experience working with multiple security classification levels.
Comprehensive knowledge across key tasks.
Technical expertise in information assurance, cybersecurity, and system security.

Responsibilities

Serve as the principal advisor on information system security.
Evaluate and monitor cybersecurity posture and ensure its adequacy.
Coordinate, review, and upload engineering artifacts into eMASS.
Monitor information security data sources.
Oversee information security awareness training.
Participate in Security Assessment and Authorization.
Develop and implement cybersecurity policies and procedures.
Manage POA&Ms and remediation plans.
Ensure compliance with cybersecurity requirements.
Analyze and define security requirements for multilevel security systems.
Design, develop, engineer, and integrate solutions to multilevel security requirements.
Conduct security audits and generate system-level security documentation.
Support development of System Operation Procedures.
Apply IT governance, risk mitigation strategies, and encryption/decryption knowledge.
Perform risk analysis, including risk assessment processes and procedures.
Recommend information assurance and security solutions.
Analyze, design, and develop security features for system architectures.
Design, develop, engineer, and implement solutions that meet security requirements.
Integrate and implement computer system security solutions.
Perform vulnerability and risk analyses during all phases of the system development life cycle.
Function as a technical expert across key tasks.