Cybersecurity Authorization Manager 16473
Cybersecurity Authorization Manager 16473
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Not Disclosed
Salary Not Disclosed
1 Vacancy
Job Description
Location: Oak Ridge TN
Job Title: Cybersecurity Authorization Manager
Career Level From: Supervisor
Career Level To: Senior Manager
Organization: Chief Information Security Off
Job Specialty: Cyber Security
What Youll Do
The Cybersecurity Authorizations Manager is responsible for the Cybersecurity Authorizations team. This team is responsible for information system and software continuous authorization to operate certification and technical testing. Also development of the required documentation for new and existing information systems. This role is expected to manage the team that plans and executes security controls to secure information systems networks and data. Also this work role collaborates with the security operations team focused on cyber risks and threats to information security systems. The Authorizations Manager will report to the Chief Information Security Officer (CISO) and will work with the Cyber Operations Manager the Network Operations Center Enterprise Risk manager and other business functional managers. This position is expected to have an expert understanding implementing the NIST Risk Management Framework (RMF). This manager shall lead a team at the Y12 National Security Center in Oak Ridge Tennessee.
Specific Job Responsibilities
Designs tests and implements stateoftheart secure operating systems networks and database products.
Conducts risk assessment and provides recommendations for application design. Involved in a wide range of security areas including architectures firewalls electronic data traffic and network access.
Uses encryption technology penetration vulnerability analysis of various security technologies and information technology security research.
Assemble security reports to regulatory agencies
Will serve as an Alternate Information System Security Manager (AISSM) assisting the primary ISSM in delegated duties.
This position is expected to have advanced experience implementing the NIST Risk Management Framework (RMF) and the various supporting elements.
This role shall stay up to date on the latest risks and threats to information security systems as well as working with the technology subject matter expert to develop risk assessments and the proper mitigations.
Maintain timely and effective communication with stakeholders to resolve Cybersecurity issues (to include development and maintenance of employee Cybersecurity training)
Plan prioritize and coordinate cyber staff priorities of work
Ensure riskbalanced security measures are integrated into IT projects and activities
Manage compliance activities to support the contractor assurance program (i.e. patching and mitigation actions to resolve vulnerability scans)
Establish policies and procedures to ensure appropriate cyber controls and monitoring are in place to ensure the confidentiality integrity and availability of business and NNSA information
Support the CISO and other Cybersecurity personnel to ensure implementation of the Cybersecurity program remains in compliance with DOE/NNSA and NIST requirements
Standardize document maintain and automate where possible cyber processes for monitoring analysis and response to cyber incidents
Plan prepare and devise work plans that ensure cyber efforts are conducted within approved budget and schedule parameters
Work with CISO to establish cyber metrics to gauge program effectiveness and perform internal audits and assessments
Responsible for hiring and developing cybersecurity subject matter experts and retaining critical cybersecurity skills within the workforce
Ability to work autonomously strong decision making effective time management and firstclass customer service skills
On call support in the event of an operational or cybersecurity incident
Ability to travel 10 per fiscal year supporting mission requirements
Specific Job Knowledge & Training Required:
Knowledge of Federal Cybersecurity protection standards and baselines (e.g. NIST Cybersecurity Framework NIST SP 80053 DoD STIGs CNSSI 1253
Ability to identify cyber risks and appropriate mitigations
Ability to create required documentation and to leverage automated tools such as electronic Governance Risk and Compliance (eGRC) systems
Ability to train and mentor others to research and document security best practices for particular devices applications and emerging technologies
Ability to present administrative technical and operational information clearly and effectively through the oral and written word as well as diagrams and charts
Experience leading selfassessments and supporting external audit activities
CISSP CEH GSIP or CISM certifications
Familiarity with automated compliance scanning tools
Knowledge of the ITIL framework
Experience in project management
Familiarity with DOE Cybersecurity program and requirements
Familiarity with supporting and enabling the DOE/NNSA mission
Familiarity with implementing
What You Can Expect
- Meaningful work and unique opportunities to support missions vital to national and global security
- Topnotch dedicated colleagues
- Generous pay and benefits with a stable organization
- Career advancement and professional development programs
- Worklife balance fostered through flexible work options and wellness initiatives
Minimum Job Requirements
- Bachelors degree: Minimum 5 years of relevant experience.
Why Y12
Notes
CNS is a drugfree workplace. Candidates accepting a job offer will be required to pass a preplacement physical drug screening and background investigation. As an employee you may be required to receive and maintain a security clearance from the United States Department of Energy in order to meet eligibility requirements for access to sensitive information or matter. U.S. citizenship is a requirement for security clearance applicants. All employees are subject to being randomly selected for drug testing without advance notification.
CNS is an equal opportunity employer. All qualified applicants will receive consideration for employment based on merit and without regard to race color religion sex sexual orientation national origin protected veteran status or disability.
Required Experience:
Manager
Employment Type
Full Time
