Information Systems Security Manager

Select how often (in days) to receive an alert: JOIN OUR TALENT NETWORK

The Security Services Department’s overall mission is to identify and counter security threats to the MIT Lincoln Laboratory’s mission of development of game-changing technology in support of National Security, including guarding against compromise by foreign intelligence agencies and insider threats. To accomplish this mission, this department formulates and implements policies, plans, and actions designed to protect facilities against threats of vandalism, accidental destruction, and sabotage;

and safeguards personnel, classified and unclassified information systems, personal identifiable information, property, and other assets from exploitation and recruitment by foreign intelligence agencies.

We foster a culture where security professionals are empowered to solve complex security problems in close collaboration with Laboratory research teams and Government counterparts. Our people are our most important resource, and we encourage a casual and flexible opportunity-filled working environment that is technology-focused. Where mission needs can be met, the Security Services Department encourages flexible schedules and hybrid remote work arrangements.

MIT Lincoln Laboratory is a Federally Funded Research and Development Center (FFRDC) whose mission is research in support of National Security.

• Mission - The Security Services Department’s (SSD) overall mission is to identify and counter security threats to the MIT Lincoln Laboratory’s mission of development of game-changing technology in support of national security, including guarding against compromise by foreign intelligence agencies and insider threats.
• Culture – We foster an inclusive, opportunity-filled environment of empowered team members from diverse backgrounds.

Be responsible for maintaining the overall system security posture of several MIT Lincoln Laboratory programs, as well as the implementation of the DoW Risk Management Framework (RMF) within assigned areas of responsibility.

• Lead and provide direct supervision to assigned Information Systems Security Officers (ISSO).
• Ensures work is prioritized consistently with work group and organization goals and objectives.
• Oversee the cybersecurity program, to include policies and procedures for assigned areas of responsibility.
• Develop and maintain System Security Plans (SSP) and associated artifacts such as the Plan of Action & Milestones (POA&M), Risk Assessment Report, and Continuous Monitoring Strategy.
• Conduct security-focused configuration management activities for classified systems and networks in a variety of traditional, virtual, and cloud-based environments.
• Ensure system information is protected while operated, maintained, and disposed of in accordance with organization security policies and procedures.
• Ensure measures are taken to report, respond, and remediate security incidents and spillages.
• Advise system owners of current cybersecurity policies and concepts when designing, procuring, adopting, and developing systems throughout the system life cycle.

• Ensure audit records are collected and analyzed in accordance with the SSP.
• Lead efforts to conduct network, system, and application vulnerability scanning, configuration assessment, risk assessment, continuous monitoring, and remediation.
• Maintain a working knowledge of system functions, security policies, technical security safeguards, and operational security measures.
• Implement an effective IS security education, training, and awareness program, to include providing training.
• Lead efforts to prepare for and participate in periodic organization compliance assessments.
• Provide account management oversight, and…