26 NOS -Sr. Information Systems Security Manager (ISSM)

Overview

SMS is seeking highly motivated experienced Information Systems Security Manager (ISSM) in support of a dynamic team at Maxwell AFB, Gunter Annex, AL.  The ISSM will support the Senior Security Architect maintain the authorization of the systems throughout its lifecycle. Provide support and technical expertise related to Defense in Depth principles and technology in security engineering designs and implementation. Be responsible for drafting and maintaining ATO/ATC. The candidate will be able to fully support new and existing inspectable DoD programs. They will manage the Information Assurance team and their work products, ensuring high quality performance and deliverables.

 

As a dynamic systems integrator, SMS offers proven solutions in engineering, operations, cybersecurity, and digital transformation. With expertise in modernizing and optimizing legacy infrastructure and systems, ensuring operational efficiency, and designing, implementing, and managing secure environments, SMS supports business and mission goals with proficiency, quality, and integrity.

 

SMS has been serving the advanced information technology needs of the federal government since 1976, delivering talented teams and innovative, cost-effective solutions and services to support our customers’ missions for more than 40 years. SMS is headquartered in McLean, Virginia, with offices and on-site operations at customer locations throughout the United States. For additional information on SMS, visit www.sms.com.

 

Submit your resume today!

 

Responsibilities

• Oversees Information Assurance Team’s processes and performs duties as ISSM for the 26 NOS.
• Ensure other IT support personnel monitor all available resources that provide warnings of system vulnerabilities or ongoing attacks.
• Communicates with internal and external project team members to implement solution designs and changes to the organization’s processes, hardware, software, and data.
• Coordinates with personnel on system security compliance and Information System Authority to Operate /Authority to Connect (ATO/ATC).
• Ensure Configuration management policies and procedures for authorizing the use of hardware/software on an IS are followed.
• Coordinate Information Security Reviews, Security Inspections, and Tests Results.
• Assesses system security threats/risks.
• Validates system security requirements definitions and analysis.
• Assists PMO with assessment and authorization process as needed.
• Tracks and validates security incidents, which requires to investigating, documenting, reporting, and providing future protective and corrective measures in response to such incidents. Ensure proper measures are taken when an incident or vulnerability is discovered.
• Leads briefings on system security compliance and Information System Authority to Operate / Authority to Connect (ATO/ATC) compliance, expiration and actions.
• Implements the Risk Management Framework (RMF) methodology to successfully implement an information technology process which shall effectively protect the element's information assets and its ability to perform its mission.
• Populates and maintains RFM databases (eMass) with bodies of evidence to support system accreditation actions.
• Collaborates with the Program Managers, AF Intelligence Community Information Assurance Program Managers, ISSOs and configuration managers to maintain an effective risk assessment process.
• Ensures data stewardship (confidentiality, integrity, and availability) is established for each IS, and specific requirements are enforced.
• Manages the day-to-day operations and administration of the Information Assurance team.
• Provides leadership and guidance to team members on best practices and expectations of the government customer.
• Is responsible for the overall performance of the IA shop and ensuring high quality products and services are being provided.

Qualifications

Qualifications/Requirements:

• Technical degree, Associates or, bachelor’s degree in computer science/Information Systems, Science/Engineering/Math
• Bachelor’s degree preferred from an accredited university in Information Assurance, Information Security Systems, or related fields.
• At least 6 - 8 years’ experience and be able to supervise and direct the work of others and have the ability to serve as a technical team lead. Note: If individual is IAT Level III, individual must have at least 7 years of experience.
• 8570 IAT level III certifications required: CISSP.
• Professional security management certification required CE/OS Certification: CCNA
• Have a working knowledge of system functions, security policies, technical security safeguards, and operational sec