Information Systems Security Manager

Booz Allen Hamilton•Annapolis Junction, MD

21h•$99,000 - $225,000•Hybrid

About The Position

Maintain responsibility for all Information Systems Security Officer (ISSO) duties in support of Information Systems, the CSS Risk Management Framework, IC Directive, 503 Practitioners Manual, Committee on National Security Systems Instruction, and 1253 security controls. Serve as an advisor on security matters, both technical and otherwise. Assist in evaluating security solutions to ensure they meet requirements for processing classified information, and assist with configuration management (CM) for information system security software, hardware, and firmware. Assist with preparing and maintaining documentation and records for workstations, servers, routers, firewalls, intelligent hubs, and network switches, including system upgrades. Coordinate with the System Owner to manage continuous monitoring and ensure systems comply with Information Assurance Vulnerability Alerts and IC Vulnerability Management. Ensure remediation actions identified through configuration management activities, risk assessments, and outstanding POA&M items are implemented. Work successfully in a team environment.

Requirements

10+ years of cybersecurity experience with government.
10+ years of experience with the Risk Management Framework.
Experience as an ISSO or ISSM.
Experience with security tools.
Experience implementing hardware and software security.
Experience with communication protocols.
Experience with encryption techniques and tools.
Top Secret clearance.
Bachelor's degree.
CISSP certification.

Responsibilities

Perform all ISSO duties in support of information systems and applicable security frameworks, directives, manuals, instructions, and controls.
Advise on security matters, including technical matters.
Assist in evaluating security solutions for processing classified information.
Assist with configuration management of information system security software, hardware, and firmware.
Prepare and maintain security documentation and records for workstations, servers, routers, firewalls, intelligent hubs, and network switches, including system upgrades.
Coordinate with the System Owner on continuous monitoring and ensure systems comply with Information Assurance Vulnerability Alerts and IC Vulnerability Management.
Ensure remediation actions arising from configuration management activities, risk assessments, and outstanding POA&M items are implemented.
Work successfully in a team environment.