Information System Security Manager (ISSM)

MindPoint Group is searching for a Information System Security Manager (ISSM) to support a law enforcement customer in Washington, DC. The ISSM shall perform daily tasks involving system compliance validation, vulnerability management response coordination, data transfer (Low to High and High to Low), and ongoing audit review and correlation, as well as general support to ongoing continuous monitoring activities. The ISSM's primary function will be to provide oversight for a team of information system security officers for the organization’s overall cybersecurity strategy. The ISSM supports the implementation of robust cybersecurity measures that proactively identify and mitigate cyber threats. This exciting role requires an appetite for learning, superior attention to detail, the ability to meet tight deadlines, great organizational skills, and the ability to work in a highly collaborative environment.

Responsibilities:

• Ensure that information system security requirements are addressed during all phases of an information system security lifecycle.
• Assist with the creation of operational Operations and Maintenance (O&M) checklists to maintain the service (daily, weekly, monthly, and yearly O&M checklists); build Tactics, Techniques, and Processes (TTPs) and Standard Operating Processes (SOPs) associated with service checklists.
• Develop and continuously update all Security Authorization documentation as required by the customer and applicable Risk Management Framework (RMF) packages using the current approved templates, forms, regulations, and methods. These documents include, but are not limited to SSP, SAR, Contingency Plan, IR Plan, CM Plan, SOPs, POAMs & Remediation Plans.
• Assist ISSM/ISSO/ISSE with the Integration/Development of new techniques to improve Confidentiality, Integrity, and Availability for networks/systems operating at various classification levels.
• Ensure that security improvement actions are evaluated, validated, and implemented as required.
• Assure successful implementation and functionality of security requirements and appropriate information technology (IT) policies and procedures that are consistent with the organization's mission and goals.
• Identify information technology (IT) security program implications of new technologies or technology upgrades.
• Participate in an information security risk assessment during the Security Assessment and Authorization process.
• Participate in the development or modification of the computer environment cybersecurity program plans and requirements.
• Prepare, distribute, and maintain plans, instructions, guidance, and standard operating procedures concerning the security of network system(s) operations.
• Recognize a possible security violation and take appropriate action to report the incident, as required.
• Track audit findings and recommendations to ensure that appropriate mitigation actions are taken.
• Support the development of policy standards and implementation strategies to ensure procedures and guidelines comply with cybersecurity policies.
• Able to perform self-sustaining and work with little to no oversight
• Assist in analyzing technical risk, upon request, of emerging cybersecurity tools and processes.

Required: