Information Systems Security Manager (Evergreen)

Description

Powder River Industries, LLC provides technical services across the entire system development life cycle (SDLC). As a prime, we are responsible for complete end to end system management for a customer’s mission system. This includes a data center, integrated logistics support, COOP, and disaster recovery. As a subcontractor we are providing services from: DevSecOps, software development, network administration, systems analysis, database administration, storage engineering, hardware engineering, Tier 1 – Tier 3 support in traditional data center environments (bare metal frames), cloud, and hybrid cloud. The cloud environments we are operating in today are AWS, Microsoft Azure, and Oracle.

Role & Responsibilities:

Responsible for the cybersecurity of a program, organization, system, or enclave. Certification Agent assigned to the ISSM to assist with ISSM roles and responsibilities.

• Conduct information system security inspections, tests, and reviews of the Risk Management Framework (RMF) Information Assurance Package to ensure AROWS maintains an Authority to Operate (ATO). Update artifacts and information within the Enterprise Mission Assurance Support Service (eMASS) to validate Security Controls and Assessments. Develop Plan of Actions and Milestones (POAMs) for non-compliant items. 

• Implement and enforce a formal information system security program, including development and review of security concept of operations, systems security plans, cyber security policies, security control assessments, contingency plans, configuration management plans, incident response plans, plan of actions and milestones, risk management plans, vulnerability scanning, and/or vulnerability management plans. 

• Demonstrate hands-on knowledge and experience with Information Assurance/Cyber Engineering requirements, design and implementation to include systems engineering principles, requirements analysis, system development (software and hardware), network security architecture concepts (e.g., topology, protocols, components, etc.), and IT security principles and methods (e.g., firewalls, demilitarized zones, encryption, etc.). 

• Ensures software, hardware, and firmware complies with appropriate security configuration guidelines (e.g., security technical implementation guides /security requirement guides).

Requirements

Non-negotiable Requirements:

1. Must be able to obtain/maintain a Q security clearance

2. On-site, no remote

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire.