Information Systems Security Manager - Advanced

Rividium•Springfield, VA

24d

About The Position

RiVidium Inc. is seeking an experienced Information Systems Security Manager – Advanced to support the NGA Defender program. The selected candidate will manage and oversee the cybersecurity posture of assigned programs, organizations, systems, or enclaves, providing cybersecurity leadership and managing information security risks. The role oversees security controls and ensures cybersecurity requirements are integrated into system operations, development, acquisition, and continuity planning. The position advises senior leadership on security risks, coordinates cybersecurity assessments, monitors security effectiveness, and implements strategies to protect mission-critical information systems. It also involves managing cybersecurity resources, establishing security policies and architecture, coordinating risk assessments and incident information, overseeing threat analysis and defense guidance, and supporting continuity planning and mission assurance. A TS/SCI clearance is required. The annual salary range is $165,000–$175,000. RiVidium Inc. notes that the range is a general guideline and that compensation decisions depend on the position’s scope and responsibilities and the candidate’s experience, education, skills, and market conditions.

Requirements

Required certification: CISSP-ISSMP or GSLC, with the applicable IAT, IAM, or IASAE Level III certification.
Demonstrated experience in information systems security management, cybersecurity, or information assurance.
Knowledge of cybersecurity risk management, security controls, security architecture, and system security requirements.
Experience evaluating security risks and recommending appropriate mitigation measures.
Experience coordinating cybersecurity assessments, inspections, testing, and remediation activities.
Knowledge of security incident reporting, threat analysis, intrusion detection, and network defense practices.
Experience developing or maintaining security policies, procedures, plans, and operational guidance.
Ability to communicate effectively with senior leadership, technical teams, and security stakeholders.
Strong analytical, organizational, problem-solving, and documentation skills.
TS/SCI clearance required.

Nice To Haves

A degree in Computer Science, Cybersecurity, Information Technology, Software Engineering, Information Systems, Computer Engineering, Mathematics, Engineering, or a related discipline is preferred.
Experience supporting federal government or Intelligence Community cybersecurity programs.
Experience managing cybersecurity requirements for mission-critical systems or enterprise networks.
Familiarity with Security Assessment and Authorization processes and security control implementation.
Experience with cybersecurity architecture, security engineering, and supply chain risk management.
Experience supporting continuity of operations planning and mission assurance initiatives.
Experience overseeing cybersecurity training, awareness, and compliance programs.

Responsibilities

Manage and oversee the cybersecurity posture of assigned information systems, programs, organizations, or enclaves.
Advise senior management and Authorizing Officials on cybersecurity risks, security posture, and changes that may affect organizational security.
Develop and align information security priorities with organizational cybersecurity strategies and mission objectives.
Manage cybersecurity resources, including budgets, staffing, contracts, and personnel, to support security goals and reduce organizational risk.
Establish and maintain information security architecture, policies, procedures, operational guidance, and standard operating procedures.
Evaluate cybersecurity policies, programs, systems, and processes for effectiveness, cost-benefit, and risk.
Ensure security safeguards are implemented and that security improvement actions are evaluated, validated, and completed.
Coordinate cybersecurity inspections, tests, reviews, and assessments across the network environment.
Participate in information security risk assessments supporting the Security Assessment and Authorization process.
Monitor cybersecurity data sources, maintain situational awareness, and collect information required for security reporting.
Oversee cyber threat analysis and development and dissemination of Computer Network Defense guidance and reports.
Coordinate cybersecurity incident information with appropriate internal and external stakeholders.
Integrate cybersecurity requirements into system development, technology acquisitions, system upgrades, and security engineering activities.
Evaluate emerging technologies and identify their potential impact on information security and organizational risk.
Oversee cybersecurity training and awareness programs to ensure personnel understand their security responsibilities.
Support enterprise continuity of operations, mission assurance, and contingency planning, including cybersecurity and supply chain risk management.
Identify security control deficiencies, noncompliance patterns, and vulnerabilities; assess associated risks and recommend mitigation strategies.
Apply knowledge of host-based and network-based intrusion detection capabilities to support cybersecurity monitoring and defense.
Identify critical infrastructure systems and technology components lacking appropriate security considerations and recommend corrective actions.
Communicate cybersecurity requirements, risks, and priorities to senior leadership, technical personnel, and other stakeholders.