Information Security Manager

Vista Innovative Solutions (VIS) is seeking an Information Security Manager.

Duties include:

Verify that allICS are certified and accredited as required by DoD and Army regulations and policy. Provides direction to ensure allICS and related products are managed within Army management/oversight databases to provide accurate depiction of the systems or products. Oversees the Information Security Management function of an organization, including the development, documentation, implementation, operation, and maintenance of an information security program, and manages ongoing activities to preserve the availability, integrity, and confidentiality of organization information resources in compliance with applicable security policies and standards.

Safeguards the organization’s computers, networks, and data against threats, such as security breaches, computer viruses, or attacks by cyber-criminals, avoiding loss of confidential information, lost revenue, and fines from regulatory agencies for failing to protect data. Manages staff, providing line management, leadership, motivation, and strategic direction. Communicates regularly with other managers, and brings the organization’s information security risks under explicit management control.

The following duties are not intended to serve as a comprehensive list of all duties performed by all employees in this classification. Shown are duties intended to provide a representative summary of the major duties and responsibilities. Incumbent(s) may not be required to perform all duties listed and may be required to perform additional, position-specific duties.

Verifies that allICS are certified and accredited as required by DoD and Army regulations and policy. Provides direction to ensure allICS and related products are managed within Army management/oversight databases to provide accurate depiction of the systems or products. Participate in strategic planning for the deployment of information security technologies and program enhancements in the OTICS environment.

Work and communicate with operations, engineering, facilities engineers, public works, and IT departments to ensure adequate security controls are in place for systems
Conducts and facilitates inquiries into all security issues and incidents involvingICS and provides findings and recommendations to the ISSM.

Identify and evaluate complex technology risks and remediation methods to mitigate risks
Assesses and evaluates vulnerabilities and/or adversary activity inICS enclaves. Detects, characterizes, and resolves insecurities inICS networks. Reviews and analyzesICS network traffic, configurations, and operating procedures and provides recommendations to improve system security posture. Performs other duties as assigned or required.

Thorough knowledge of network systems design, development, testing, installation, operating, management, documenting, and maintenance concepts and methods to provide and protect network services.

Extensive knowledge of information technology methods and information protection techniques and procedures. This includes hardware, software, and operating systems; systems configuration and integration; maintenance, upgrades, and modifications, network operations functions, mapping and documenting architecture, firewalls, packet switching communications protocols, and diagnostic tools to analyze difficult and complex system problems and provide resolutions.

Technical experience with or understanding of operational technologies to include programmable logic controllers (PLCs), remote terminal units (RTUs), and supervisory control and data acquisition (SCADA) systems.
At least 3 years of security-related Information Technologies experience with at least 1 year networking with ports and protocols, with an understanding of securingICS environments. Other experience (including any of the following but not limited to):
Internet of Things (IOT) security, network administration, network security, server administration, system security, endpoint security, vulnerability, patch management, desktop security

In-depth knowledge…