Information System Security Manager SME

• Serves as the primary liaison between stakeholders and technical teams to ensure a unified understanding of security requirements and address questions or concerns proactively.

• Interprets mission warfighter and userneedsto ensure security solutions align withprogramobjectivesand system requirements.

• Analyzes security-related Service Level Agreements (SLAs) Technical Performance Measures (TPMs) and Key Performance Indicators (KPIs) to support reporting risk assessment and service delivery.

• Overseesandprioritizesremediation activities involving NIST Risk Management Framework (RMF) requirements and other security issues to ensuretimelyresolution.

• Manages and executes security controls and compliance activities across development and operations strengthening the organizations overall security posture.

• Lead the team responsible for the ISSMs.

• Establish a centralized ISSM pool to coordinate reviewvalidate and approve all activities which contribute to the assessment and authorization of automated information systems.

• Expectedto be able to address anything from physical security matters to information assessments security tests and evaluations preparation of Contingency Plans and administration of Life Cycle Management and Configuration Management documentation.

• Assess the vulnerability of AISs.

• Recommend and implement changes to IT systemsin accordance withthe DoD directives.

• Function as a technical specialist and assessthe riskmanagement security and contingency planning programs.

• Implement measures to protect data from physical destruction or theft.The contractor ISSM shall ensure that back-up procedures are in place for recovery from loss destruction of data and program files or from physical damage.

• Implement SOPs and periodicallytestsrecovery procedures to make sure recovery procedures are operational.

• Develop policy and guidance andestablishimplementation and oversight plans to ensure compliance with Risk Management requirements.

• Coordinate the review and evaluation of cyber security programs and effectiveness of implementation;identifyproblem areas; updates andestablishesnew requirements in response tonew technologiesand threats; and make recommendations to achieve a fully compliant IT architecture.

• Develop Systems Security Contingency Plans and Disaster Recovery Procedures.

• Develop and implement training and awareness programs to ensure thatAdvanasystems network and data users are aware of understand and adhere to systems security policies and procedures.

• TS/SCI with CI Poly securityclearance

• Bachelordegree (Computer Science Cyber Security Information Technology Software Engineering Information Systems Computer Engineering Mathematics or Engineering) or higher from an accredited college or university OR Offerings listed in DoD 8140 Training Repository ORCISSP-ISSMP or GSLC

• Demonstrated experience with:

• 12 years experience in the Cybersecurity area

• 10 years experience with technology.

• 8 years experience with IA technology.

• 5 years experience with Risk Management Framework experience.

• 5yearsof project management work experience.

• Expert knowledge of NIST SP 800-37 CNSSI 1253 FIPS 199 and NIST SP 800-53

• Knowledge of the DoD Risk Assessment Methodology (DRAM) and POAM tracking.

• Expert in RMF andA&Aaccreditation processes.

• Certifications in Cybersecurity like Security plusDOD IA/IAT Level II certification

Preferred Qualifications:

Certifications in Cybersecurity likeDOD IA/IAT Level III certification