Information Systems Security Manager

Description

Leidos' Corporate Information Security Office, reporting through the Digital Sector, is seeking an Alternate Information Systems Security Manager (Alt. ISSM) in our San Diego, CA Campus Point office.

In this role, you will oversee several DCSA-approved Collateral Information Systems and maintain accreditation throughout the system lifecycle. You will serve as the Information Assurance (IA) Subject Matter Expert (SME), providing technical leadership and security oversight for collateral enclaves across the enterprise, with demonstrated expertise in SIPRNet environments and requirements. To be successful in this role, you will have a proven track record supporting and leading successful CORA / CCRI inspections
, ensuring compliance with DoD, DCSA, and applicable cybersecurity policies and directives. Additionally, you will oversee day-to-day information system security operations; manage collateral IA and IT personnel; resolve complex cybersecurity challenges; and develop innovative solutions to meet evolving security requirements. Ideally, you will demonstrate the ability to successfully work independently and collaboratively with analysts, information technology management and staff, site leadership, and external stakeholders to ensure mission success and regulatory compliance.

Primary Responsibilities

This role may include a combination of duties to protect information and maintain security controls for an entire system, site, or program to reduce risk.

• Develop and lead Information Security projects from concept through deployment, implementation, and user acceptance.

• Support and maintain SIPRNet environments, ensuring compliance with DoD, NISPOM, DAAG, and organizational cybersecurity requirements through continuous monitoring, risk management, and security operations.

• Conduct vulnerability assessments and remediation activities, including STIG implementation, vulnerability analysis, POA&M management, and timely correction of security findings to maintain system accreditation and compliance.

• Conduct vulnerability assessments and remediation efforts, including STIG implementation, vulnerability analysis, POA&M tracking, and timely correction of security findings to maintain system accreditation and compliance.

• Develop and deliver cybersecurity, information assurance, and incident response training programs; create training materials, procedures, and technical instruction to promote security awareness and workforce readiness.

• Implement and manage RMF Continuous Monitoring activities, utilizing automated tools and ticketing systems to track security controls, vulnerabilities, corrective actions, and compliance status.

• Maintain and update system authorization packages and supporting documentation, including SSPs, CONOPS, POA&Ms, security control evidence, continuous monitoring artifacts, and other Assessment and Authorization (A&A) documentation.

• Develop and maintain Configuration Management procedures for security-relevant hardware, software, and firmware; facilitate CCB meetings, assess security impacts of proposed changes, and document approvals and implementation evidence.

• Ensure information systems are operated, maintained, and disposed of in accordance with approved authorization packages, customer requirements, and applicable security policies.

• Evaluate proposed system changes and advise program and site leadership on security implications, risks, and required mitigations.

• Participate in risk management activities, security assessments, audits, and inspections; conduct risk assessments and coordinate corrective actions to address identified findings.

• Lead investigations of cybersecurity incidents and security violations, coordinate reporting requirements, and ensure appropriate containment, remediation, recovery, and corrective actions are implemented.

• Partner with the Facility Security Officer (FSO) and program leadership to develop, implement, and manage the Information Systems Security Program.

• Develop, implement, enforce, and continuously improve information security policies, procedures, and operational practices.

Basic Qualifications

• An active DoD Secret clearance is required for…