Information Systems Security Manager - Advanced

RiVidium Inc. is seeking an experienced Information Systems Security Manager – Advanced to support the NGA Defender program. The selected candidate will be responsible for managing and overseeing the cybersecurity posture of assigned programs, organizations, systems, or enclaves. The ISSM-Advanced will provide cybersecurity leadership, manage information security risks, oversee security controls, and ensure that cybersecurity requirements are integrated into system operations, development, acquisition, and continuity planning.

This position requires the ability to advise senior leadership on security risks, coordinate cybersecurity assessments, monitor security effectiveness, and implement strategies that protect mission‑critical information systems.

• Manage and oversee the cybersecurity posture of assigned information systems, programs, organizations, or enclaves.
• Advise senior management and Authorizing Officials on cybersecurity risks, security posture, and changes that may affect organizational security.
• Develop and align information security priorities with organizational cybersecurity strategies and mission objectives.
• Manage cybersecurity resources, including budgets, staffing, contracts, and personnel, to support security goals and reduce organizational risk.
• Establish and maintain information security architecture, policies, procedures, operational guidance, and standard operating procedures.
• Evaluate cybersecurity policies, programs, systems, and processes to assess effectiveness, cost-benefit, and risk.
• Ensure security safeguards are appropriately implemented and that security improvement actions are evaluated, validated, and completed.
• Coordinate cybersecurity inspections, tests, reviews, and assessments across the network environment.
• Participate in information security risk assessments supporting the Security Assessment and Authorization process.
• Monitor cybersecurity data sources, maintain situational awareness, and collect information required for security reporting.
• Oversee cyber threat analysis and the development and dissemination of Computer Network Defense guidance and reports.
• Coordinate cybersecurity incident information with appropriate internal and external stakeholders.
• Integrate cybersecurity requirements into system development, technology acquisitions, system upgrades, and security engineering activities.
• Evaluate emerging technologies and identify their potential impact on information security and organizational risk.
• Oversee cybersecurity training and awareness programs to ensure personnel understand their security responsibilities.
• Support enterprise continuity of operations, mission assurance, and contingency planning, including cybersecurity and supply chain risk management.
• Identify security control deficiencies, noncompliance patterns, and vulnerabilities; assess associated risks and recommend mitigation strategies.
• Apply knowledge of host-based and network-based intrusion detection capabilities to support cybersecurity monitoring and defense.
• Identify critical infrastructure systems and technology components that lack appropriate security considerations and recommend corrective actions.
• Communicate cybersecurity requirements, risks, and priorities to senior leadership, technical personnel, and other stakeholders.

• Degree in Computer Science, Cybersecurity, Information Technology, Software Engineering, Information Systems, Computer Engineering, Mathematics, Engineering, or a related discipline preferred.
• Required certification: CISSP-ISSMP or GSLC, with the applicable IAT, IAM, or IASAE Level III certification
• Demonstrated experience in information systems security management, cybersecurity, or information…