Information System Security Manager (ISSM) - Fairfax, Virginia

In-Depth Engineering Corporation•Fairfax, VA

28d•$100,000 - $150,000•Onsite

About The Position

In-Depth Engineering Corporation seeks a skilled Information System Security Manager (ISSM) to support the security posture of our on-premises systems. The ideal candidate will have strong hands-on experience with the National Industrial Security Program (NISP) utilizing the Enterprise Mission Assurance Support Service (eMASS) and Risk Management System (RFM), and understanding of network fundamentals and vulnerability management tools. This role will directly support system accreditation, continuous monitoring, and operational security compliance. We seek self-starters capable of independent effort as well as participation on a small team. This is a permanent, full-time position and the work will be performed on-site at our headquarters in Fairfax, Virginia.

Requirements

Must be US Citizen for consideration and hold an active secret clearance
Bachelor's degree in computer science, cybersecurity, information systems, or related field
5+ years of experience in an ISSM or ISSO role
Hands-on experience with STIGs, STIG Viewer, and SCAP tools
Strong Linux experience (Red Hat Enterprise Linux or similar)
Demonstrated experience with eMASS certification and authorization of IT systems
Ability to develop and update relevant RMF artifacts; System Security Plan (SSP), Plan of Actions and Milestones (POA&M), Security Controls Traceability Matrix (SCTM), as well as the associated security policies and procedures
Experience with applying and documenting policy and system configurations that satisfy NIST Security Control requirements

Nice To Haves

DISA eMASS Computer Based Training (CBT) and the Cyber Awareness Challenge training a plus.

Responsibilities

The ISSM is responsible for the oversight of the information system’s security posture.
Emphasis is placed on the application and sustainment of the security controls to ensure cyber security requirements are properly administered throughout the system.
The ISSM serves as the principal advisor on all matters, technical and otherwise, related to the security of systems under their purview.
Primary functions include development and maintenance associated with the NISP eMASS and RFM process and certification and authorization of IT systems.
The ISSM will frequently interact with internal and external stakeholders, provide cybersecurity oversight, and drive compliance standards for the information systems.
The ISSM partners with security engineers and system administrators to ensure security patches and secure configurations are in place and functioning properly on the information systems.
The ISSM is also a primary stakeholder and helps the ISSOs facilitate the continuous monitoring efforts used to promote RMF compliance throughout the organization.
An ability to plan effectively and prioritize projects is a required function of the ISSM role.