Information Systems Security Manager

West 4th Strategy•Hampton, VA

1d•$140,000 - $165,000•Onsite

About The Position

We need an experienced Information Systems Security Manager to support the 441st Vehicle Support Chain Operations Squadron (441 VSCOS). 441 VSCOS centrally manages the Department of the Air Force's (DAF) vehicle fleet enterprise, providing program management, technical, and training support across 257 steady-state and contingency locations and 387 units, including Combat Air Force, Mobility Air Force, and ISR aircraft units, through the ELMS, AVID, and CISP application systems. In this role, you will execute ISSM duties for AVID and CISP, maintain ATO and ISCM compliance, and advise leadership on security risk and inspection findings. This is a full-time opportunity. We can offer a competitive salary, and a comprehensive benefits package.

Requirements

5 to 8 years of information systems security experience, including ATO/ISCM processes within a DoW environment
DoW 8570/8140-compliant certification (e.g., CISSP, Security+, CAP) commensurate with ISSM role required or obtainable within contract-required timeframe
Working knowledge of RMF, ATO/IATT processes, and FedRAMP approval timelines
Experience preparing certification and accreditation (C&A) packages
Strong written communication skills to translate technical security issues for non-technical leadership

Responsibilities

Executes Information System Security Manager (ISSM) responsibilities and duties
Maintains Authority to Operate (ATO) and completes required Information System Continuous Monitoring (ISCM) for the AVID and CISP programs
Evaluates risk, updates relevant documentation, and provides reports and project reviews for AVID and CISP IT programs, applications, and proposed solutions
Provides updates on automated information systems for ATOs and on certification and accreditation (C&A) packages for AVID and CISP
Provides AVID level-one IT support, fielding and resolving helpdesk calls, troubleshooting, and analyzing user issues
Advises VSCOS leadership during management reviews and program updates on AVID and CISP system tracking, adverse actions, potential capability shortfalls, and security concerns
Tracks completion of ISCM reports occurring on a monthly, quarterly, semi-annual, and annual basis and incorporates status into monthly reporting
Performs automated information systems (AIS), Information Assurance (IA), and IT administrator duties, including inspections, reports, security records, and network node operation, maintenance, and disposal in accordance with security policies
Tracks and files user access for AVID
Prepares co-utilization agreements for network nodes operating in Government facilities
Obtains Interim Authority to Operate (IATT) and/or ATO for systems when required and advises on timelines for IATT, ATO, and FedRAMP approvals
Reviews system test plans, identifies AIS vulnerabilities, recommends and implements approved countermeasures, and analyzes and assesses impacts of changes to ATO or IATT
Represents the customer on technical reviews and technical inspection teams and conducts security surveys
Gathers security documentation for inclusion in system accreditation packages
Finds and articulates solutions to complex security problems discovered during system use and reviews
Assists Department of Defense, National Agency, and contractor organizations with certification and accreditation (C&A) efforts
Translates complex security issues into language appropriate for unit leadership