Senior Information Systems Security Manager (ISSM)

Epirus•Torrance, CA

4d•Hybrid

About The Position

Epirus is seeking an experienced Senior Information Systems Security Manager (ISSM) to maintain the current classified infrastructure and lead Epirus’ Information Security team’s efforts to obtain Authorizations to Operate (ATO) on future projects. The ISSM will own the classified information system process from start to finish. The ISSM will be required to travel to customer sites or testing facilities as necessary. The ideal candidate is experienced working within the defense industry, has experience bringing multiple systems through the ATO process, and can perform in a fast-moving, startup environment.

Requirements

5+ years of experience as an Information Systems Security Officer (ISSO) or Information Systems Security Manager (ISSM)
Fully competent in the execution of RMF system requirements
Currently hold a valid IAM Level III certification (CISSP, GSLC, CISM)
Active TS/SCI Clearance
Experience in utilizing security-relevant tools, operating systems (Windows, Linux, etc.), and applications (SCAP, STIG, Nessus) in support of classified programs
Experience developing security policies required to support Interim Authority to Test (IATT), Authorizations to Connect (ATC), and Authorizations to Operate (ATO) efforts
Ability to conduct risk assessments and investigations, execute appropriate risk mitigations, and oversee incident response or vulnerabilities promptly and effectively
Must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

Nice To Haves

Experience with the Defense Counterintelligence and Security Agency (DCSA) Assessment and Authorization Process Manual (DAAPM) and Risk Management Framework (RMF) security processes

Responsibilities

Serve as a key cybersecurity stakeholder in projects, security assessments, program proposals, and program direct work
Act as a manager of the existing systems within the current ATO
Perform continuous monitoring of current systems
Build out and maintain compliant, air-gapped systems in support of program and project efforts
Collaborate with the Facility Security Officer (FSO) to develop and implement a robust IS security education, training, and awareness program
Travel up to 25% to test sites and customer locations