Information Systems Security Manager

SOSi•Pearl Harbor, HI

12d•Onsite

About The Position

SOSi is seeking a seasoned Information Systems Security Manager to lead cybersecurity initiatives at Joint Base Pearl Harbor Hickam in Honolulu. This role involves architecting and maintaining cybersecurity frameworks to protect DoD networks and systems, collaborating with customers, partners, and stakeholders to implement security protocols, and ensuring the security of national digital infrastructure.

Requirements

An Active in-scope SECRET clearance.
Bachelor’s degree in a related field plus 4 years of related experience.
DoD 8570 IAM-III compliant (CCISO, CISM, CISSP (or Associate), or GSLC).
Knowledge of NSA’s Commercial Solution for Classified (CSfC) solution and Cross Domain Solutions (CDS).
Thorough understanding of NIST Publication 800-53r5, Risk Management Framework, Executive Order 14028, and OMB Mandate M-22-09.
Prior experience with eMASS.
Strong communication skills and ability to coordinate tasks across functional groups.

Nice To Haves

An Active in-scope TOP SECRET clearance with SCI Eligibility.
Recent experience in the assessment and authorization of systems.
Practical knowledge of JIRA and Confluence.
Experience with compliance tools such as Tenable Nessus and SCAP.
Experience in program policy and process creation and oversight.

Responsibilities

Assist the Cyber Security Compliance Team Lead in formulating and upholding an organized information system security program and policies.
Establish and maintain secure computer systems and networks for classified processing, and take responsibility for the administration, maintenance, and security auditing of such systems.
Develop and supervise the implementation of guidelines and policies for operational information systems security.
Manage assigned eMASS (Enterprise Mission Assurance Support Service) packages containing all security authorizations for information systems under their supervision.
Coordinate inspections, tests, and reviews of information system security.
Contribute expertise and skills to ensure the team's success in responding to security incidents and protecting organizational assets.
Support the execution of the information system patch and vulnerability management program using practical understanding of the Assured Compliance Assessment Solution (ACAS).
Ensure Security Technical Implementation Guidelines (STIG) are reviewed, maintained, and updated on a quarterly basis.
Ensure compliance with Configuration Management policies and procedures for authorizing the use of hardware and software on an information system.
Engage with external stakeholders to facilitate the coordination of interconnection requests and ensure efficient processing and approval.
Maintain current knowledge of system functions, security policies, technical security safeguards, and operational security measures.
Manage, maintain, and execute the information security continuous monitoring plan.
Keep records of all security-related vulnerabilities POA&Ms and ensure that serious or unresolved violations are reported to the AO/DAO.
Evaluate any changes to the system, its environment, and operational requirements that could impact security authorization.