Information System Security Manager SME

Galapagos Federal Systems LLC.•Colorado Springs, CO

6d•$170,000 - $180,000

About The Position

Galapagos Federal Systems LLC is seeking a highly skilled Information Systems Security Manager (ISSM) Subject Matter Expert SME Level 4 to support the United States Space Force (USSF) and mission-critical cybersecurity operations. The ISSM will provide senior-level cybersecurity expertise for classified systems supporting advanced test and training capabilities. The ideal candidate will have extensive knowledge of Department of Defense (DoD) and Intelligence Community (IC) cybersecurity standards, strong technical and communication skills, and the ability to operate effectively in a fast-paced, highly classified environment.

Requirements

Active Top Secret clearance with SCI eligibility (TS/SCI)
15+ years of cybersecurity experience, including managing DoD and/or Intelligence Community Information Assurance activities in accordance with the Risk Management Framework
Extensive experience supporting cybersecurity requirements for classified, mission-critical systems and networks
Demonstrated experience with RMF, A&A, ATO, IATT, POA&Ms, SCTMs, and SSPs
Strong knowledge of cybersecurity security controls and requirements for protecting system and network confidentiality, integrity, and availability
Experience working with applicable cybersecurity frameworks and guidance, including NIST SP 800-53 and JSIG
Experience developing and executing cybersecurity test plans and procedures
Demonstrated ability to develop, review, coordinate, and present cybersecurity documentation and technical briefings to government stakeholders
Experience coordinating cybersecurity activities with AOs, SCAs, configuration managers, system owners, and technical teams
Ability to complete required training and maintain applicable certifications in accordance with DoD cybersecurity workforce requirements
Bachelors degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science, from an ABET accredited or CAE designated institution
One or more of the following (required): Security+, CCSP, CGRC/CAP, CASP+, Cloud+, SSCP, GSEC—or equivalent military training/certification

Nice To Haves

One or more of the following (desired): CISM, CISSO, CISSP, CISSP-ISSMP, GCIA, GCSA, GSLC, CGIH, or FITSP-M—or equivalent military training/certification

Responsibilities

Provide senior-level cybersecurity and Information Assurance (IA) support for classified systems and networks in accordance with Department of the Air Force (DAF), DoD, Intelligence Community (IC), and applicable security requirements
Manage cybersecurity activities throughout the system lifecycle to protect the confidentiality, integrity, and availability of mission-critical systems, data, and resources
Lead and support Risk Management Framework (RMF) activities, including Assessments and Authorizations (A&A), Authorization to Operate (ATO), Interim Authorization to Test (IATT), and continuous ATO requirements
Develop, maintain, and manage RMF documentation, including System Security Plans (SSPs), Security Controls Traceability Matrices (SCTMs), Plans of Action and Milestones (POA&Ms), and supporting authorization documentation
Apply and assess cybersecurity controls in accordance with applicable NIST, JSIG, DoD, DAF, and IC guidance
Manage IA and cybersecurity requirements for new and existing classified networks, including extensions or modifications to government-furnished networks
Identify cybersecurity risks and vulnerabilities and develop technical recommendations and mitigation strategies
Develop and execute cybersecurity test plans and procedures to validate system and network security capabilities
Coordinate cybersecurity activities with Authorizing Officials (AOs), Security Control Assessors (SCAs), configuration managers, system owners, and other government stakeholders
Prepare and present cybersecurity briefings, program reviews, schedules, status updates, technical documentation, and recommendations to government leadership
Conduct research and analysis of cybersecurity policies, standards, and processes to ensure continued compliance
Develop and support effective information system security education, training, and awareness programs