Information Systems Security Manager (ISSM)

CACI International•Reston, VA

1d•$86,600 - $181,800•Onsite

About The Position

You will fulfill the role of Information Systems Security Manager (ISSM) for the Financial System to provide authoritative direction for system accreditation through the development, engineering, integration, and testing of all components of the system. You will be working with other members of the CACI project team, the Government’s Cyber Security team, and the Enterprise Information Technology staff to ensure the security of the system in all environments (development and operations).

Requirements

Active Top Secret clearance, and willing to obtain a CI polygraph after on-boarding.
Bachelor's Degree in a related field or four years of additional experience may be substituted in lieu of a degree.
8 years of relevant experience
Five (5) or more years’ experience maintaining the security posture of computing environments, including cloud environments
Experience managing the full lifecycle of, and workflows for, security accreditation projects under the NIST Risk Management Framework.
Extensive knowledge of information system security policies, and NIST 800-53 security controls.
Five (5) or more years’ experience creating and maintaining security system plans (SSP) and other security-relevant documentation for computing systems and applications
Able to obtain Level II Information Assurance Manager certification such as CISSP, SecurityX, or CISM.

Responsibilities

Supporting efforts to obtain Authority To Operate, external IT audits, continuous monitoring, and for supporting the use of emerging technologies in CACI and customer environments.
Research and maintain proficiency in tools, techniques, countermeasures, and trends in computer and network vulnerabilities, data hiding and network and device security and encryption.
Perform duties in support of in-house and external customers. Design, develop or recommend integrated system solutions ensuring proprietary/confidential data and systems are protected in accordance with mandated standards. Participate with the client in the strategic design process to translate security and business requirements into technical designs.
Configure and validate secure systems, tests security products/systems to detect computer and information security weakness.
Generates security architecture documentation. Provide critical written and verbal analyses of previously generated security architecture documentation and vulnerability and risk assessments.
Design and implement plans of action and milestones to remediate findings from vulnerability and risk assessments. Provide information assurance for digital information, ensuring its confidentiality, integrity, and availability.
Granting of authorization to operate IT systems at acceptable levels of risk
Monitoring and testing of IT systems for vulnerabilities and indicia of compromise.
Incident response and remediation, Development of appropriate policy, Relevant user security awareness and training. Compliance with applicable government and other external standards.