Information Systems Security Manager
Springfield, VT - USA
Job Summary
RiVidium Inc. is seeking an experienced Information Systems Security Manager to support the NGA Defender program. The selected candidate will be responsible for managing and overseeing the cybersecurity posture of assigned programs organizations systems or enclaves.
The ISSM-Advanced will provide cybersecurity leadership manage information security risks oversee security controls and ensure that cybersecurity requirements are integrated into system operations development acquisition and continuity planning. This position requires the ability to advise senior leadership on security risks coordinate cybersecurity assessments monitor security effectiveness and implement strategies that protect mission-critical information systems.
Key Responsibilities
- Manage and oversee the cybersecurity posture of assigned information systems programs organizations or enclaves.
- Advise senior management and Authorizing Officials on cybersecurity risks security posture and changes that may affect organizational security.
- Develop and align information security priorities with organizational cybersecurity strategies and mission objectives.
- Manage cybersecurity resources including budgets staffing contracts and personnel to support security goals and reduce organizational risk.
- Establish and maintain information security architecture policies procedures operational guidance and standard operating procedures.
- Evaluate cybersecurity policies programs systems and processes to assess effectiveness cost-benefit and risk.
- Ensure security safeguards are appropriately implemented and that security improvement actions are evaluated validated and completed.
- Coordinate cybersecurity inspections tests reviews and assessments across the network environment.
- Participate in information security risk assessments supporting the Security Assessment and Authorization process.
- Monitor cybersecurity data sources maintain situational awareness and collect information required for security reporting.
- Oversee cyber threat analysis and the development and dissemination of Computer Network Defense guidance and reports.
- Coordinate cybersecurity incident information with appropriate internal and external stakeholders.
- Integrate cybersecurity requirements into system development technology acquisitions system upgrades and security engineering activities.
- Evaluate emerging technologies and identify their potential impact on information security and organizational risk.
- Oversee cybersecurity training and awareness programs to ensure personnel understand their security responsibilities.
- Support enterprise continuity of operations mission assurance and contingency planning including cybersecurity and supply chain risk management.
- Identify security control deficiencies noncompliance patterns and vulnerabilities; assess associated risks and recommend mitigation strategies.
- Apply knowledge of host-based and network-based intrusion detection capabilities to support cybersecurity monitoring and defense.
- Identify critical infrastructure systems and technology components that lack appropriate security considerations and recommend corrective actions.
- Communicate cybersecurity requirements risks and priorities to senior leadership technical personnel and other stakeholders.
Required Qualifications
- Degree in Computer Science Cybersecurity Information Technology Software Engineering Information Systems Computer Engineering Mathematics Engineering or a related discipline preferred.
- Required certification: CISSP-ISSMP or GSLC with the applicable IAT IAM or IASAE Level III certification
- Demonstrated experience in information systems security management cybersecurity or information assurance.
- Knowledge of cybersecurity risk management security controls security architecture and system security requirements.
- Experience evaluating security risks and recommending appropriate mitigation measures.
- Experience coordinating cybersecurity assessments inspections testing and remediation activities.
- Knowledge of security incident reporting threat analysis intrusion detection and network defense practices.
- Experience developing or maintaining security policies procedures plans and operational guidance.
- Ability to communicate effectively with senior leadership technical teams and security stakeholders.
- Strong analytical organizational problem-solving and documentation skills.
Preferred Qualifications
- Experience supporting federal government or Intelligence Community cybersecurity programs.
- Experience managing cybersecurity requirements for mission-critical systems or enterprise networks.
- Familiarity with Security Assessment and Authorization processes and security control implementation.
- Experience with cybersecurity architecture security engineering and supply chain risk management.
- Experience supporting continuity of operations planning and mission assurance initiatives.
- Experience overseeing cybersecurity training awareness and compliance programs.
Clearance- TS/SCI required
The annual salary range for this position is $150000$165000.
The listed salary range represents a general guideline; however RiVidium Inc. considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidates experience education skills and current market conditions. At RiVidium Inc. it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case.
Required Experience:
Manager
About Company
Established in 2008, RiVidium, Inc. (dba TripleCyber) is a VA-Verified SDVOSB and an SBA-Certified 8(a) company. To prepare our clients for the future, RiVidium has balanced all parts of our organization to attract the finest employees in order to 'Strive to be the missing element def ... View more