Information System Security Manager

Booz Allen Hamilton•Rome, NY

1d•$99,000 - $225,000•Remote

About The Position

Serve as an Information Systems Security Manager (ISSM) responsible for the Risk Management Framework (RMF) authorization of assigned Information Systems (IS). Ensure systems are operated, maintained, and disposed of in accordance with security policies and procedures as outlined in the security plan. Conduct periodic assessments of authorized systems and ensure corrective actions for all identified findings and vulnerabilities are addressed in a timely manner. Maintain responsibility for all RMF continuous monitoring activities for authorized systems, including periodic analysis of collected audit records and system vulnerability management cycle. Monitor system incident recovery processes to ensure security features and procedures are properly restored and functioning correctly. Ensure user activity monitoring data is analyzed, stored, and protected in accordance with our programs policies and procedures and execute a strong continuous monitoring strategy.

Requirements

Experience with System Administration functions in a networked environment
Experience with eMASS, Security Technical Implementation Guides (STIGs), computer networking, and operating systems
Ability to work in a team environment, be highly motivated, learn and acquire new skills, and adapt to an ever-changing security environment
Ability to be briefed into Special Access Programs (SAPs)
Top Secret clearance
HS diploma or GED and 6+ years of experience as an ISSM or ISSO, or Bachelor's degree and 4+ years of experience as an ISSM or ISSO
Ability to complete required ISSM training within 90 days of hire
DoD 8140 required CISSP or IAM Level III Certification

Nice To Haves

Knowledge of National Industrial Security Program Operating Manual (NISPOM), Joint Special Access Program Implementation Guide (JSIG), Intelligence Community Directives (ICD) 503 and 703, STIGs, the RMF process, or associated National Institute of Standards and Technology (NIST) publications
Knowledge of government classified contracts and DD 254 requirements from an information security perspective
Possession of excellent organizational skills
Possession of excellent oral and written communication skills
Bachelor's degree in Computer Science, Cybersecurity, Information Assurance or a technology or engineering degree
Technology or security-specific industry Certification, including CCNA, Red Hat or Windows Certification

Responsibilities

Serve as an Information Systems Security Manager (ISSM) responsible for the Risk Management Framework (RMF) authorization of assigned Information Systems (IS).
Ensure systems are operated, maintained, and disposed of in accordance with security policies and procedures as outlined in the security plan.
Conduct periodic assessments of authorized systems and ensure corrective actions for all identified findings and vulnerabilities are addressed in a timely manner.
Maintain responsibility for all RMF continuous monitoring activities for authorized systems, including periodic analysis of collected audit records and system vulnerability management cycle.
Monitor system incident recovery processes to ensure security features and procedures are properly restored and functioning correctly.
Ensure user activity monitoring data is analyzed, stored, and protected in accordance with our programs policies and procedures and execute a strong continuous monitoring strategy.