Information Systems Security Manager (ISSM)

Information Systems Security Manager (ISSM)

Job Category: Security

Time Type: Full time

Minimum Clearance Required to Start: Secret

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Local

* * *

The Opportunity:
CACI is seeking an ambitious, energetic, and seasoned Information Systems Security Manager (ISSM). The selected candidate will be part of a dynamic, growing, cross-functional, and geographically distributed team. This position is located at our Melbourne, Florida facility.

Responsibilities:

The selected candidate will report to the corporate Information Systems Security Manager (ISSM) and will be responsible for the information security posture for the company and the implementation and oversight of information systems at our Melbourne, FL, location. This position will be a key and valued member of our security team. The ISSM will perform duties as defined within Department of Defense (DoD) Risk Management Framework (RMF) directives, Intelligence Community Directive (ICD) 503, National Industrial Security Program Operating Manual (NISPOM), DSS Assessment and Authorization Process Manual (DAAPM), and relevant National Institute of Standards and Technology (NIST) Special Publications. Duties include, but are not limited to the following:

• Develop and manage the information assurance (IA) programs and policies for the Melbourne classified operating environments.

• Oversee day-to-day IA activities, including operation and compliance of classified information systems, implementation of security controls, continuous monitoring processes, security audits, implementation of security patches and updates, and IA configuration controls.

• Develop and submit Risk Management Framework (RMF) authorization packages to achieve Approval to Operate (ATO) for classified systems.

• Provide guidance and support to system engineers, system administrators, and program management for securing information systems in accordance with DISA STIGs\SRGs, Department of Defense (DoD) requirements, and industry best practices.

• Perform compliance validation scans using DoD endorsed tools such as ACAS\Nessus, SCAP Compliance Checker, Evaluate STIG, and STIG Viewer.

• Conduct self-inspections and maintain compliance with the RMF, NISPOM, DAAPM, corporate directives, pertinent DoD Information Assurance IA/Cyber instructions and other government contractual security requirements.

• Collaborate with Government organizations and support IA initiatives and tasking defined in contract requirements.

• Develop an information system security education program and provide training to all users of information systems supporting classified programs.

• Define and communicate the security posture and culture of the organization.

Qualifications:

Required: 

• US citizenship, due to the nature of the work and contract requirement

• Top Secret clearance (Post-hire requirement)

• Bachelor of Science degree in Information Technology, Computer Science, or equivalent experience

• CISSP, CISM, Security+, or equivalent certification

• Experience preparing System Security Plans, RMF packages, and POA&Ms

• Minimum 5 years' experience as ISSM for classified network/systems with knowledge of supporting information assurance activities

Desired:

• TS/SCI clearance

• ISSM/ISSO Required Training as outlined in the DSS Assessment and Authorization Process Manual (DAAPM): CS102.16, CS103.16, CS104.16, CS105.16, CS106.16, CS107.16, CS200.16

• 10 years previous experience as an ISSM for classified networks/systems with knowledge of supporting information assurance activities, including risk management framework and assessment and authorization (formerly certification and accreditation)

• Experience with the application and testing of Security Technical Implementation Guides (STIG) on Linux and Windows operating systems

• Experience with DoD scanning applications, including ACAS\Nessus, Evaluate STIG, and SCAP

-

________________________________________________________________________________________

What You Can Expect:

 

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven b