Information Systems Security Manager

Location: Wright-Patterson AFB

Responsible for overseeing the development, implementation, and maintenance of an organization's information security program. Ensure systems are operated, maintained, and disposed of in accordance with security policies and procedures Generate and maintain required information security documentation including Systems Security Plans (SSP), Information Assurance Standard Operating Procedures (IA SOP), Continuous Monitoring Plans, Security Control Traceability Matrices (SCTM), Risk Assessments, Plan of Action & Milestones (POA&M), equipment specifications, practices, and procedures Maintain customer-required Information Assurance (IA) certifications (i.e. CISSP, Security+, etc.)

Maintain day-to-day security posture and continuous monitoring of classified ISs Schedule, oversee execution, and maintain records of required Information System (IS) auditing, patching, maintenance, software/hardware changes, and scanning based on evolving threat/vulnerabilities and customer compliance requirements Develop and conduct test procedures for verification Assessment and Authorization (A&A), Risk Management Framework (RMF) safeguards to meet customer requirements based upon NISPOM, DAAPM, JSIG and related NIST publications Employ customer-approved procedures for sanitizing and releasing system components and media Maintain a repository of security authorizations for ISs under the office's purview Assess changes to an IS by performing periodic self-inspections, tests, and reviews of the IS program to ensure that systems are operating as authorized/accredited and that conditions have not changed;

ensure corrective actions are taken for identified findings and vulnerabilities Maintain a working knowledge of IS functions, security policies, technical security safeguards, and operational security measures Coordinate with Facility Security Officer (FSO) and Contractor Program Security Officers (CPSO) to define, implement, and maintain information security policies, strategies, and procedures Implement policies and procedures for responding to security incidents, and for investigating and reporting security violations and incidents Ensure the development, documentation, and presentation of classified IS security education, awareness, and training activities Must be a team player and be able to work within all levels of a project team Excellent time management, scheduling, and organizational skills Ability to work well independently as well as follow detailed instructions for completing task Capable of conducting independent research, evaluation, and suggestion of recommendations on the acquisition of IA tools and security application software to satisfy the accreditation requirements in support of the organization's mission and workplace efforts to include methods of conducting non-traditional Cybersecurity Test & Evaluation and Independent Assessments Routinely engage with Govt technical representative + tech leads for our teammates and subcontractors Acts as a resource/mentor for colleagues with less experience Knowledge of federal security requirements and mandates (e.g., RMF, FIPS, NIST) Excellent oral and written communication skills Strong organizational and time management skills Ability to manage multiple tasks concurrently Ability to work independently and follow detailed instructions Team player with the ability to work within all levels of a project team Experience using security hardening, collection, and assessment tools (e.g., SCAP, Nessus, SIEM) Strong Microsoft Windows background with some knowledge of UNIX/LINUX Knowledge of various computer software applications, hardware platforms, networking components, and LAN/WAN architecture Familiarity with security procedures in a SCIF/SAPF environment Collaboration/Teamwork:
Engages others across roles through communication and mutual respect, shares insights, enabling effective teamwork to ensure collective success. (teamwork) Technical and Functional

Skills:

Leverages technical and functional expertise to deliver high performance, addresses challenges, and supports business needs while pursuing continuous skill development. (domain knowledge) Entrepreneurialism:
Fosters innovation, evaluates ideas, and advances initiatives with sound judgment and organizational awareness to drive growth and impact. (innovation) Communication:
Communicates clearly and effectively, fostering understanding, collaboration, and alignment through active listening and impactful messaging. (effective communication) Customer Focus:
Prioritizes customer needs, builds trust, and delivers exceptional service by using insights to drive improvements and strengthen relationships. (customer insight) Bachelor's degree in Computer Science, Information Technology, Information Security, or related field Five (5) years of experience working in an IA-related field CompTIA Security+ or higher-level DoD 8570.01/8140.03 certification DIA Xacta training Certification in one or more of the following: ISC2…