Information System Security Manager (ISSM)

Metrea•Annapolis Junction, MD

2d•Onsite

About The Position

Metrea delivers effects-as-a-service to national security partners across five domains and more than a dozen mission areas. We own the whole stack: designing, building, and operating turnkey capabilities that give our partners decisive, asymmetric advantage against rapidly evolving threats. The Electromagnetic and Cyber Group (EM&C) is responsible for developing flexible and survivable advanced electronic warfare and secure communications equipment while providing the industry’s leading signals intelligence, electronic warfare, and cyber experts. We are seeking a highly motivated Information System Security Manager (ISSM) and Alternate Security Officer for an entry-level security position. In this dual role, you will lead the development, implementation, and evaluation of our classified information systems program in strict accordance with NISPOM standards, while supporting corporate and industrial security operations. This role is ideal for a junior security professional looking to grow their career.

Requirements

Basic familiarity with NISPOM, NIST SP 800-171, DISS, NBIS, and other government security databases and procedures
Security background with a focus on personnel security and/or information systems security
Ability to learn and develop technical competence commensurate with the complexity of classified systems and CSA guidelines
Must hold an active Top-Secret security clearance with SCI eligibility
Active DoD 8570/8140 IAT Level II or III baseline certification (CompTIA Security+, CISSP), or ability to obtain within 6 months of hire
Ability to support after hours alarm/intrusion response
Applicants must be legally authorized to work in the United States
Must be a U.S. Citizen
Active TS/SCI clearance required at time of hire, and the ability to maintain it throughout employment
Employment is contingent on meeting all clearance requirements

Responsibilities

Oversee the development, implementation, and evaluation efforts of the contractor’s information system program for management, system personnel, users, and other stakeholders
Develop, document, and monitor compliance of the information system security program in accordance with CSA-provided guidelines for management, operational, and technical controls
Develop, update, and maintain comprehensive security documentation (SOP, SSPs, etc.) and security authorization requests to the CSA
Certify to the CSA in writing that the System Security Plan (SSP) is fully implemented for each authorized system; verify that specified security controls are in place and properly tested, and that the system continues to function as described
Verify that comprehensive self-inspections are conducted annually on all classified processing systems, and ensure immediate corrective actions are taken for all identified findings
Manage and execute security awareness, counterintelligence, and SCI briefings/debriefings; brief users on their explicit responsibilities and restrictions prior to system access and ensure personnel are aware of reporting responsibilities
Coordinate directly with the Insider Threat Program Senior Official (ITPSO) and Facility Security Officer (FSO) to ensure insider threat awareness is fully integrated into the information system security program
Interpret security policy regarding the processing, dissemination, and controlling of classified materials; prepare and disseminate security requirements, guidance, and procedures
Provide physical/industrial security, computer investigation, and day-to-day security operations support
Respond to after-hours alarm/intrusion detection systems during the week and on weekends, as needed
Other duties as relevant and assigned