Information Systems Security Manager - JobID-0311

Innovative Defense Technologies•San Diego, CA

4d•Onsite

About The Position

Innovative Defense Technologies (IDT), a leading defense technology company, is seeking an Information System Security Manager (ISSM) to support its San Diego, CA office. The ISSM will ensure Risk Management Framework (RMF) compliance through the implementation, management, and Continuous Monitoring (ConMon) of the Information System located at the IDT San Diego office within the classified lab. All applicants must currently possess an active Secret U.S. Security Clearance. This is a fully on-site position based out of our San Diego, CA location.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or related field, or equivalent professional experience.
Minimum of 8 years of IT experience, including 5 years or more as an ISSM or equivalent role in a cleared DCSA Accredited facility.
Ability to travel up to 10% of the time as needed.
Excellent knowledge of the NISPOM and the DCSA DAAG and their requirements and procedures.
Proficient in Windows and Linux operating systems and their security configurations.
Proficient in eMASS, Tenable, NIST 800-53 Controls, RMF, SIEM tools, ePO, and network security tools and techniques.
Familiar with the SDLC and DevOps/DevSecOps methodologies and their security implications.
Active Secret clearance or higher.
Information Assurance Management (IAM) Level 3 certification in accordance with DODI 8140/8570 requirements, such as CISSP, CISM, or GSLC.
Strong analytical, troubleshooting, and communication skills with the ability to coordinate effectively across engineering, cybersecurity, and operational teams.

Nice To Haves

Self-motivated professional with the ability to independently manage multiple priorities, systems, and technical efforts simultaneously in fast-paced or mission-critical environments with minimal supervision.
Technical experience administering and securing containerized environments using Docker, Kubernetes, or similar container orchestration platforms.
Experience with infrastructure automation and configuration management tools such as Ansible, PowerShell, Chef, Salt, Puppet, or similar technologies.
Familiarity with software deployment and systems management tools such as PDQ Deploy or equivalent solutions.
Strong verbal and written communication skills with the ability to collaborate across engineering, cybersecurity, and operational teams.

Responsibilities

Implementing and managing the IDT San Diego Classified Information Systems (IS) security program and policies and procedures.
Generating and maintaining authority to operate (ATO) for new and current classified information systems authorized under RMF.
Using eMASS to document and track the security authorization process and maintain the security plan and artifacts.
Maintaining a working knowledge of system functions, security policies, technical security safeguards, and operational security measures.
Chairing the Change Control Board and overseeing change in the environment, including clearly articulating requirements for change.
Overseeing and conducting Control Correlation Identifier (CCI) self-assessments and periodic testing to evaluate the security posture of the IS.
Leading the information security portion of government assessments, Government on-sites and the periodic self-inspections.
Working closely with other program managers and stakeholders to facilitate change control and continuous monitoring of the lab environment.
Supporting the Software Development Lifecycle (SDLC) and DevOps/DevSecOps processes and ensuring security best practices are followed.
Implementing and managing an effective IS security education, training, and awareness program.
Assisting the FSO and the Insider Threat Program Senior Official (ITPSO) in ensuring that insider threat awareness is addressed in the classified computing environments.
Managing and engaging with the maintenance and execution of the Information Security Continuous Monitoring (ISCM) plan.
Ensuring weekly audit compliance (user activity monitoring, data transfer audit logs) and that audit data is analyzed, stored, and protected in accordance with the required auditing frequency.
Ensuring compliance of current Information Assurance (IA) policies, concepts, and measures when designing, procuring, adopting, and developing new IS.
Managing and approving data transfer and assured file transfer responsibilities in accordance with IDT Policy and Procedures; both within IDT lab environments and in nearby US Government facilities.
Developing, documenting, managing and approving monthly vulnerability scan results, quarterly Security Technical Implementation Guide (STIG) compliance and applicable Plan of Action and Milestones (POA&M) for each Classified IS enclave.
Managing requests that involve co-utilizations and joint-use agreements of data residing on the IS and/or within the closed area labs.
Leading a team of Information System Security Officers (ISSOs) and Security Administrators (SAs) through the RMF process, providing tasking to ensure program requirements, deliverables and schedules are met.
Performing comprehensive investigations of security incidents and ensuring proper measures are taken post discovery of the incident/event.
Preparing and demonstrating compliant classified IS’s in advance of a DCSA assessments.