Information Systems Security Manager (ISSM), JM - PR 1476

Explore Current Openings•Colorado Springs, CO

9d•$112,000 - $122,000•Onsite

About The Position

PE Systems, Inc. is hiring a Journeyman Information System Security Manager (ISSM) to support the Nuclear Command, Control, and Communications (NC3) Program at Peterson SFB, Colorado. The ISSM oversees system security posture and supports development and maintenance of cybersecurity architecture, requirements, objectives, policies, personnel, processes, and procedures. The role ensures system and application deliverables comply with applicable National, Federal, Department of Defense, and Department of the Air Force cybersecurity policies and laws, and supports confidentiality, integrity, and availability through cybersecurity planning, analysis, development, implementation, maintenance, and enhancement. The position supports system and application Assessment and Authorization efforts, including Risk Management Framework activities and artifacts. It assesses system changes, vulnerabilities, threats, and security controls; contributes to cybersecurity requirements across system design and technical baselines; and prepares security analyses, reports, plans, and compliance information. The ISSM also supports testing, audits, monitoring, external cybersecurity evaluations, special projects, and workforce qualification requirements under the applicable DoD and Air Force cyber workforce policies. The role requires a Top Secret-SCI clearance and the ability to work independently on high-visibility or mission-critical program aspects. The listed annual base salary range is $112,000–$122,000. The position is based at Peterson SFB, CO, and may require travel between facility sites. PE Systems states that it offers generous PTO, holidays, competitive pay, and outstanding benefits.

Requirements

BA/BS or MA/MS degree.
3–10 years of experience related to the position requirements.
Meet the Advanced-level qualification requirements for Information System Security Manager (722) or Vulnerability Assessment Analyst (541) under the DoD Cyber Workforce Framework and applicable DoD instructions and manual.
Ability to work independently on high-visibility or mission-critical aspects of a program and perform all functional duties independently.
Must possess and maintain a government Top Secret-SCI security clearance.
Proficiency with Microsoft programs, including Excel, Word, and Outlook.
Ability to transport oneself to various facility sites as required.
If using a personal motor vehicle, a valid driver’s license and proof of insurance are required.

Responsibilities

Ensure system and application deliverables comply with applicable National, Federal, DoD, and Department of the Air Force cybersecurity policies and legal requirements.
Plan, analyze, develop, implement, maintain, and enhance information systems security programs, policies, procedures, and tools to protect system, network, and data confidentiality, integrity, and availability.
Maintain current cybersecurity workforce qualifications in accordance with applicable DoD and Air Force requirements.
Support system and application Assessment and Authorization activities, including reviewing the quality and completeness of RMF tasks and artifacts.
Recommend policies and procedures to improve information system reliability and accessibility and defend against unauthorized access.
Conduct risk and vulnerability assessments and inspections, evaluate threats and vulnerabilities, and identify required safeguards.
Participate in meetings, teleconferences, change control boards, and working groups to align cybersecurity requirements with technical baselines, security architecture, information flows, design, and security controls.
Evaluate deficiency reports, problem reports, change requests and proposals, and AF Form 1067s; contribute to root-cause analyses and solution recommendations; assess security impacts; and document changes to RMF artifacts.
Review modification packages, program and system documents, support agreement updates, and communications and network infrastructure upgrades for cybersecurity configuration management and support requirements.
Review system test plans and results and, when necessary, observe security control testing; document findings in reports.
Perform security impact analyses for system changes and prepare letters of assurance, security impact letters, and risk assessment letters, including applicable exceptions, deviations, or waivers.
Monitor intelligence and open-source information for vulnerabilities, assess risks, and recommend POA&M actions.
Promote security awareness among management and ensure security principles are reflected in organizational goals.
Conduct system security monitoring, evaluations, audits, and reviews; recommend contingency plans and disaster recovery procedures.
Recommend and implement programs to ensure users understand and follow system, network, and data security policies and procedures.
Participate in network and system design, including cryptographic design, to ensure appropriate security policies are implemented.
Apply knowledge of cryptography and cryptographic key management concepts.
Support gathering, analysis, and preservation of evidence used in the prosecution of computer crimes.
Assess security events, determine their impact, and implement corrective actions.
Apply cybersecurity and cryptographic policies, principles, and practices throughout the system development lifecycle.
Author, monitor, and record system information in applicable databases; enter system, security status, and portfolio management information in ITIPS for FISMA, SISSU, Clinger-Cohen Act, and other statutory compliance.
Author, review, certify, and maintain security management plans and RMF artifacts, including RMF implementation plans, system security management plans, information support plans, program protection plans, security risk analyses, security vulnerability and countermeasure analyses, vulnerability management plans, common control packages, security concepts of operations, OPSEC plans, and Authority-to-Connect guest system packages.
Support external teams evaluating system cybersecurity posture, including teams conducting cyber tests, war games, penetration tests, and studies for organizations such as NSA, DISA, and the Air Force Audit Agency.
Support development, coordination, and implementation of cybersecurity special projects and taskers, including DCO and requests or actions from higher headquarters and named military and government organizations.
Perform Information Systems Security Management (722) and Vulnerability Assessment Analyst (541) core and additional tasks and meet applicable knowledge, skills, and abilities.