Information Systems Security Manager (ISSM)

SMX•Tampa, FL

23h•Onsite

About The Position

SMX is seeking an Information Systems Security Manager (ISSM) to support USSOCOM PEO-TIS's portfolio of programs. This position is located on-site at MacDill AFB, FL. The role requires a DoD TS/SCI security clearance, which necessitates US citizenship for work on DoD contracts. The ISSM will provide cybersecurity oversight for all systems under their purview, advise program management on cybersecurity matters, perform security self-assessments, manage Assessment and Authorization (A&A) activities, coordinate program security activities, and ensure compliance with various security regulations and policies.

Requirements

Clearance: Secret with ability to get TS with favorable SCI Adjudication (TS with SCI eligibility preferred)
Minimum IAM Level II certification (i.e. CASP, CISSP)
Experience with auditing security controls
Experience with RMF management tool such as eMASS or Xacta
Experience in Software documentation, software packages, support and/or training of IT systems
US citizenship for work on DoD contracts

Nice To Haves

SOF experience
Experience in tactical communications

Responsibilities

Provide cybersecurity oversight for all systems under purview
Advise the Program Manager and other program stakeholders regarding cybersecurity matters, including change control, Information Assurance Vulnerability Management (IAVM), and DoD policy
Perform security self-assessment, using the DISA Security Technical Implementation Guides (STIGs), Security Content Automation Protocol (SCAP) and the Assured Compliance Assessment Solution (ACAS)
Record Assessment and Authorization (A&A) activities in the Enterprise Mission Assurance Security System (eMass) and approve the ISSO’s eMass activities
Coordination of program security activities including audits, system release activities, change requests, ad-hoc client requests, deliverables, security documentation updates, and Plan of Action and Milestones (POA&Ms)
Coordinate with system stakeholders to remediate system vulnerabilities
Support, implement, maintain, and monitor security and privacy controls in compliance with FISMA, FedRAMP, and NIST RMF requirements and guidance
Plan, document, implement, assess, maintain, and monitor security and privacy controls in accordance with requirements, policies, standards, processes, and procedures documented in the NIST 800-53 family of security controls
Provide guidance, oversight, and expertise to ISSO team members
Ensure compliance with NIST, DoD, CNSS and local policies; to include but not limited to NIST 800-53, DoDI 8510.01, DoDI 8500.01 and DoDM 8570.01