Information Security Manager & ISSO

Company

Federal Reserve Bank of Minneapolis

The Federal Reserve Bank of Minneapolis is looking for experienced Information Security Manager to support the Bank in its role as a Fiscal Agent for the Department of Treasury and the Bureau of the Fiscal Service.

In this role, you will lead a small team of security professionals and will serve as the Information System Security Officer (ISSO) role for a cloud based financial system. In the role of an ISSO, you will ensure that all relevant IT security requirements prescribed by the Federal Reserve and Fiscal Service are implemented and maintained throughout the lifecycle of the information system. Ideal candidates will have had previous experience with NIST based information security control and risk management frameworks as well as a commitment to delivering high-quality, prompt, and efficient services to stakeholders.

Must be a U.S. citizen or lawful permanent resident alien with at least three (3) years of legal residency. This position does not offer employment-based visa sponsorship.

The Minneapolis Fed believes in flexibility to balance the demands of work and life while also recognizing the necessity of connecting and collaborating with our colleagues in person. Onsite work is an essential function of this position, and you are expected to be in the office two (2) days per week for meetings and team collaboration.

Responsibilities: 

• Execute the full cycle of employment matters, including but not limited to those involving hiring, retention and performance optimization, salary recommendations, and decisions related to the termination of employment, as well as the documentation of these matters. 

• Develop and evaluate the performance of staff, which includes managing staff to identify developmental assignments and training opportunities, working with individuals on their career goals, delegating responsibilities, providing feedback, and evaluating performance on any of the preceding duties.   

• Establish objectives and key results for the team and adjust direction as needed to respond to organizational strategies and priorities.

• Serve as the principal advisor to the System Owner, Authorizing Official, and Chief Information Security Officer (CISO) on all matters (technical and otherwise) involving security of assigned system(s) and/or service(s).

• Ensure necessary governance documentation (e.g., business case, technical addendum, Security Impact Analysis – SIA, Classification and Determinations Memo – CDM, etc.), reviews, approvals, and agreements for system(s) and/or service(s) are in place and kept up to date. 

• Ensure that management, operational, and technical security controls (inherited and system specific) are managed throughout the system development life cycle.

• Maintain an Ongoing Authorization to Operate (ATO) for assigned system(s) or an Ongoing Authority to Use (ATU) for assigned service(s) consistent with applicable policy, standards, procedures, and guidelines. 

• Execute ongoing or operational information security continuous monitoring activities per defined frequency and processes to identify, report, mitigate, and manage risks to maintain the overall security posture and support ongoing authorization decisions.

• Ensure that all data, privacy, records management, and other applicable requirements for the protection of sensitive and mission critical information within the assigned system(s) and/or service(s) are being met and followed.                                                       

• Ensure security incidents are promptly reported. Perform notification for any suspected security incidents in a timely manner and assist in the investigation of incidents if requested.

• Ensure responses to cyber security related data calls and audit requests are completed by the specified due dates.

• Maintain a high level of technical, operational, and cybersecurity knowledge including completing specialized training on an annual basis.   

• Represent the Bank at all levels across the System including participating and/or leading security-focused workgroups at the System Level. Influence decisions and strategic initiatives through this participation and translate relevant activities into concrete action plans for the Bank. 

Qualifications: 

• Bachelor’s degree in information systems, computer science, or a related field with a minimum of (8) eight years of broad technical experience, with at (5) least five years in an information security role and at least (2) two years of direct supervision and people leadership responsibilities OR Master’s degree in information systems, computer science, or a related field with a minimum of (6) eight years of broad technical