Information System Security Manager (ISSM)

TSC•Sierra Vista, AZ

2d•Remote

About The Position

TSC has an exciting opportunity for an Information System Security Manager (ISSM) Remote supporting our Airborne Solutions and ISR (AISR) Division. This role will be responsible for implementing, maintaining, reviewing, and enforcing security policies on classified information systems (IS) by following government directives and program requirements. In this dynamic position, you will interface and collaborate with other Information Assurance (IA) professionals, Security professionals, System Administrators, the engineering community, and government customers on compliance and configuration change management. The ISSM is responsible for the cybersecurity posture of Unmanned Air Vehicles and Ground Control Systems. The ISSM ensures cybersecurity documentation is drafted/maintained, and cybersecurity policies are followed when designing, adopting, and developing new mission information systems.

Requirements

Bachelor's in Information Technology Computer Science or a comparable field and 10-12 years’ experience (relevant years of experience and certifications in lieu of a degree possible)
US Citizen with active Secret Security Clearance
IAM Level III certification required as per DoDD 8140 (eg. CISSP, CISM, GSLC etc)
Experience with eMASS and development of Risk Management Framework Accreditation packages to include artifact development/management, CCB attendance, POA&M oversight, Security Impact Analysis
Strong understanding of NIST 800 and CNSSI 1253 Publications
Experience in applying security principles to all states of system development from requirements development through operational acceptance
Experience in conducting information systems security assessments, evaluating Information Assurance and Cybersecurity controls
Strong understanding of security trends and technologies
Excellent written and verbal communication skills, and proficiency in MS Office Applications

Nice To Haves

Experience with applying/maintaining cybersecurity practices to airborne/ground platforms
Strong analytical skills, including data analysis and problem-solving
Cybersecurity Maturity Model Certification (CMMC)
Experience with eMASS and development of RMF Accreditation packages to include artifact management, CCB attendance, POA&M oversight, Security Impact Analysis

Responsibilities

Design and implement technical security controls
Identify and remediate vulnerabilities
Advise Information System Security Engineers (ISSEs), IT/Network and Program Managers
Provide hands-on implementation of security controls
Implement Plans of Action and Milestones (POAM) ensuring required vulnerability/compliance scans meet the standards required to obtain and maintain an ATO from the Authorizing Official