Information Systems Security Manager (ISSM)

Applied Research Associates, Inc.•Albuquerque, NM

35d•$100,000 - $115,000

About The Position

The Southwest Division (SWD) of Applied Research Associates, Inc. (ARA) is seeking an experienced Information Systems Security Manager (ISSM) to join our Albuquerque, NM. security team. In this role, you will be responsible for overseeing and managing the classified information security program; developing and implementing information security policies, standards and procedures. The ISSM will support Information System (IS) full life cycle activities including preparing accreditation/certification packages in accordance with relevant regulations and standards, maintenance and monitoring of operational systems, system upgrades and feature additions during program execution, and system decommission and de-certification activities. The ISSM must have experience in developing Risk Management Facility (RMF) accreditation packages to ensure IS's are operated and maintained in accordance with ARA and customer security requirements. The ISSM will maintain Authorization to Operate (ATO) certifications for networked systems and ARA applications by developing IS documentation including the executive summary, system security plan, privacy plan, security control assessment, privacy control assessment, risk assessments, equipment specifications, and any relevant plans of action and milestones. The ability to work independently, as well as with teammates, is paramount for this position as it is an extremely dynamic environment. A successful candidate will have strong written and oral communication skills who takes the initiative and creates decisive paths to complete tasks. The ISSM should have experience with security assessments & hardening tools; possess strong understanding of operating systems (Windows and Linux); have or be able to obtain Security + certification and have a working knowledge of eMASS applications. ARA is an employee-owned company that offers competitive compensation and excellent benefits including medical and dental coverage, 401(k) profit sharing, life and long-term disability insurance, performance bonuses, and professional development. Salary Range: $100,000 - $115,000 (Dependent on experience)

Requirements

SECRET security clearance with the ability to obtain a TOP SECRET security clearance
Position requires a minimum of five to seven years of related experience.
Previous experience as an ISSO/ISSM is required.
DoD Directive 8570.1 IAM Level II or higher certification.
Familiar with the 32 CFR Part 117, DAAG, NIST RMF, DoDM 5205.07, and/or JSIG IS requirements.
Experience investigating security incidents to include data spills, data integrity incidents and malicious code incidents
Experience with compliance certifications of various operating systems.
Experience with Windows and Server as well as Linux/Unix-based systems.

Nice To Haves

Experience with security assessments & hardening tools
Strong understanding of operating systems (Windows and Linux)
Have or be able to obtain Security + certification
Working knowledge of eMASS applications

Responsibilities

Overseeing and managing the classified information security program
Developing and implementing information security policies, standards and procedures
Support Information System (IS) full life cycle activities including preparing accreditation/certification packages in accordance with relevant regulations and standards, maintenance and monitoring of operational systems, system upgrades and feature additions during program execution, and system decommission and de-certification activities.
Developing Risk Management Facility (RMF) accreditation packages to ensure IS's are operated and maintained in accordance with ARA and customer security requirements
Maintain Authorization to Operate (ATO) certifications for networked systems and ARA applications by developing IS documentation including the executive summary, system security plan, privacy plan, security control assessment, privacy control assessment, risk assessments, equipment specifications, and any relevant plans of action and milestones.