Information Systems Security Manager (ISSM) III

General Dynamics Information Technology • Colorado Springs, CO

1d • $144,245 - $195,155 • Onsite

About The Position

The Information Systems Security Manager (ISSM) serves as a principal advisor on technical and other matters involving the security of information systems under their purview. The role provides day-to-day support for Collateral, Sensitive Compartmented Information (SCI), and Special Access Program (SAP) activities. The ISSM leads and mentors cybersecurity and IT team members and supports the organization’s cybersecurity program, system authorization, risk management, security assessments, incident response, and compliance with applicable security requirements. This is an onsite role in Colorado Springs, Colorado, with 40 scheduled hours per week and 10–25% travel required. Current TS/SCI clearance is required; the employee must be willing to obtain TS/SCI with a CI polygraph.

Requirements

• 10 or more years of related experience.
• At least 2 years of SAP experience.
• Prior experience in roles such as ISSO or ISSM.
• Master’s degree or equivalent experience (6 years).
• IAT Level III or IAM Level III certification within 6 months of hire.
• Current TS/SCI clearance; must be willing to obtain TS/SCI with CI polygraph.
• U.S. citizenship required.
• Expert knowledge of DoD, national, and applicable service and agency security policies, manuals, and standards.
• Ability to regularly lift up to 50 pounds.

Responsibilities

• Lead and maintain productive working relationships with DoD agency managers, data stewards, and senior leadership to support a positive cybersecurity posture.
• Participate in strategic planning and implementation of the Cyber Security Program.
• Provide expert input to cybersecurity policies based on the Risk Management Framework (RMF), with emphasis on the Joint Special Access Program Implementation Guide (JSIG) authorization process.
• Advise customers on RMF assessment and authorization issues; perform risk assessments and recommend actions to DoD agency customers.
• Develop and implement security assessment plans, advise program managers on security testing methodologies, and review AIS assessment plans.
• Evaluate authorization documentation and provide written recommendations to government program managers; develop, review, endorse, and recommend system assessment documentation for action by the AO or DAO.
• Develop and maintain a formal Information Systems Security Program and maintain an applicable repository of authorization documentation and modifications.
• Ensure IAOs, network administrators, and other cybersecurity personnel receive necessary technical and security training; develop and implement security education, training, and awareness activities.
• Ensure approved procedures exist for clearing, sanitizing, and destroying hardware and media.
• Execute security assessments and verify that required protection-level features and assurances are functioning.
• Establish a Configuration Control Board (CCB) charter and ensure security-relevant configuration changes to software, hardware, and firmware are documented.
• Develop incident-response policies and procedures, including investigation and reporting of security violations and incidents; ensure appropriate protection or corrective measures are taken when incidents or vulnerabilities are discovered.
• Establish data ownership and responsibilities for each authorization boundary, including accountability, access rights, and special handling requirements.
• Evaluate threats and vulnerabilities, determine whether additional safeguards are needed, and assess changes to systems, environments, and operational needs that could affect authorization.
• Ensure valid authorization determinations are in place for all authorization boundaries under the ISSM’s purview.
• Coordinate with the PSO or cognizant security official on approval of external information systems, such as guest systems and interconnected systems.
• Conduct periodic assessments of authorization-boundary security posture and periodic testing using intrusion, attack-detection, and monitoring tools, sharing responsibility with ISSOs.
• Ensure system recovery and reconstitution processes are developed and monitored so authorization boundaries can be recovered according to their availability-level determination.
• Keep authorization documentation current and accessible to properly authorized individuals, and ensure security requirements are addressed throughout all phases of the system life cycle.
• Establish and develop an organizational self-inspection program and periodically review system security to account for policy or technology changes.
• Coordinate technical security issues outside the ISSM’s expertise or responsibility with the ISSE.
• Provide expert research and analysis supporting program expansion and cybersecurity and IT activities.
• Develop Assured File Transfers (AFT) in accordance with the JSIG.
• Provide leadership, mentoring, and quality assurance for cybersecurity and IT team members.

Benefits

• 401(k) with company match.
• Medical plan options, including some with Health Savings Accounts.
• Dental and vision plan options.
• Paid education and certifications.
• Professional growth opportunities and internal mobility support.
• Paid vacation, sick and personal time, holidays, and other paid leave, including parental, military, bereavement, and jury duty leave.
• Short- and long-term disability benefits, life insurance, accidental death and dismemberment coverage, personal accident coverage, critical illness coverage, and business travel and accident insurance.
• Full flex work weeks where possible.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior