Information System Security Manager

Share this job as a link in your status update to Linked In.

Information System Security Manager

Cape Fox subsidiary, Cape Fox Federal Integrators (CFFI), is seeking a highly qualified and motivated Information System Security Manager (ISSM) to provide cybersecurity support for Non-classified Internet Protocol Router Network (NIPRNet), Defense Research and Engineering Network (DREN), Research, Development, Test, and Evaluation (RDTE), Secret Internet Protocol Router Network (SIPRNet), and standalone systems and enclaves for a federal government client. The ISSM will oversee cybersecurity compliance, Risk Management Framework (RMF) requirements, personnel certification and training verification, privileged access management, and security audits in accordance with applicable DoD policies and directives.

This position is contingent upon contract award.

The above salary range represents the company’s good faith and reasonable estimate of the range of possible compensation at the time of posting. In addition, we offer a variety of benefits, including company holidays, paid time off, health insurance, dental insurance, vision insurance, life and disability insurance, tuition reimbursement, as well as a 401K with company match. This job will be posted until filled or withdrawn.

• Provide ISSM cybersecurity support for NIPRNet, DREN, RDTE, SIPRNet, and standalone enclaves/systems
• Perform the Information System Security Manager (ISSM), 8140 Cyberwarfare Code of 722 duties to include formally validating and verifying that all administrative and technical personnel meet the mandatory baseline certification and training requirements of DoD 8570.01-M / DoDI 8140 prior to granting elevated system access; administering and maintaining signed Privileged Access Agreements (PAAs); and conducting recurring audits of all privileged accounts
• Cybersecurity Consultation:
  Advise unit technicians on cybersecurity requirements, solutions, and implementation
• Enterprise Cybersecurity Compliance:
  Administer, coordinate, and track compliance with TSRL enterprise cybersecurity architecture, strategy, plans, and policies across the distributed organization
• RMF and ATO Management:
  Ensure Risk Management Framework (RMF) compliance, maintain valid Authority to Operate (ATO), keep security documentation current, and provide cybersecurity expertise to supported units
• Configuration Management:
  Review configuration management processes, maintain secure mechanisms, update RMF requirements, and support internal and external audits and inspections
• IT Portfolio and Database Management:
  Maintain Information Technology (IT) portfolio data and database structures in the Information Technology Investment Portfolio System (ITIPS), RMF Workflow, and Enterprise Mission Assurance Support Service (eMASS)
• Security Standards and Authorization:
  Maintain Authority to Operates (ATOs) for TSRL and related subsystems in accordance with NIST SP 800-53 Rev. 5, CNSSI 1253 Rev. 4, DoDI 8510.01, DISAI 270-50-9, and applicable RMF directives
• Risk Advisory and Reporting:
  Advise senior management and the Authorizing Official on risk levels, security posture, and changes affecting organizational cybersecurity
• Threat and Vulnerability Assessments:
  Assess system and enclave threats, vulnerabilities, and technical risks; document findings and recommend mitigation measures
• Cybersecurity Reporting and Repository Management:
  Collect and maintain cybersecurity reporting data and manage the digital eMASS system package repository on authorized information systems
• eMASS Administration:
  Track systems and enclaves in eMASS, maintain current ATOs, and manage security controls and assessment…