Information Systems Security Manager

Benefits:

• 401(k)
• Paid time off
• Dental insurance
• Health insurance
• Vision insurance

The Information Systems Security Manager will lead and support the systems, networks, hardware, software, user accounts, devices, security controls, and technology processes that enable BNS employees and field teams to perform their work effectively.

The Information Systems Security Manager will serve as BNS’s technical lead for establishing, securing, documenting, and maintaining the information systems used to process, store, or transmit Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). The position will lead implementation and continuous operation of the technical safeguards necessary for BNS to achieve and maintain its required CMMC status and comply with NIST SP 800-171 and applicable DFARS cybersecurity requirements.

This position will also play an important role in supporting the company's cybersecurity and compliance efforts, including leading the planning, implementation, documentation, assessment readiness, remediation, and continuous monitoring activities necessary for BNS to achieve and maintain its required CMMC Level 2 status.

The successful candidate will be comfortable moving between strategic thinking and hands-on problem solving—whether that means troubleshooting a user's computer, managing Microsoft 365, addressing a network issue, coordinating with an outside vendor, improving cybersecurity controls, or helping prepare the organization for an audit.

• Oversee day-to-day IT operations across BNS offices, field personnel, and remote employees.
• Manage and maintain company networks, servers, workstations, laptops, mobile devices, printers, peripherals, and other technology assets.
• Support Microsoft 365, cloud applications, user accounts, email, collaboration tools, and other business-critical applications.
• Manage user onboarding, offboarding, access changes, equipment deployment, and technology provisioning.
• Monitor system performance, availability, backups, security alerts, and other key IT functions.
• Troubleshoot hardware, software, networking, connectivity, and access issues.
• Maintain accurate IT asset inventories and technology documentation.
• Coordinate technology deployments, upgrades, migrations, and lifecycle replacements.
• Establish and maintain appropriate backup, recovery, and business continuity practices.

• Help develop, implement, and maintain BNS cybersecurity policies, procedures, and technical controls.
• Support the organization's cybersecurity risk management program.
• Define, document, and maintain the CMMC assessment scope, including CUI data flows, system boundaries, network diagrams, asset inventories, external service providers, security-protection assets, and specialized assets.
• Establish and administer a secure CUI environment or enclave, including approved methods for receiving, processing, storing, transmitting, sharing, printing, and destroying CUI.
• Develop and maintain the System Security Plan, supporting policies and procedures, control implementation evidence, configuration baselines, and Plans of Action and Milestones.
• Conduct or coordinate NIST SP 800-171 self‑assessments, gap assessments, control testing, remediation, and assessment preparation.
• Maintain evidence sufficient to demonstrate that each applicable security requirement is implemented and operating effectively—not merely documented.
• Coordinate with BNS leadership, legal/contracts personnel, managed service providers, cloud providers, Registered Practitioners, assessors, and C3
  
  PAOs.
• Manage security configuration, multifactor authentication, privileged access, endpoint protection, encryption, vulnerability…