Information System Security Manager (ISSM)

Description

• Work directly with the TRMC SISO on all TRMC RMF packages and ATO Status updates
• Review Cybersecurity tool reports, ACAS, HBSS, for the purposes of reporting and compliance
• Lead security audit and compliance activities for each system responsible for
• Responsible for auditing all artifacts provided in each RMF package to determine system readiness for ATO packet submissions.
• Provide recommendations to the SISO, PM, and AO regarding remediation and mitigation of identified vulnerabilities on test reports and plan of action and milestones (POA&Ms).
• Attending Executive Program Reviews as the ISSM
• Work directly with a distributed team to reduce travel
• Draft and present RMF deliverables to senior leadership
• Software Certification package development
• Monitor system status updates and report to senior leadership.
• Interface with PMs and SISO on issues needing input/concurrence
• Deliver documentation to include: Executive level briefings, Assessments, Self-Assessments, RMF packages, and supporting RMF documentation
• Support security engineering projects and solution delivery.
• Includes monthly executive reports, vulnerability reports, JFHQ DODIN reporting and briefing.
• Monthly executive briefing to SISO, PM on security metrics
• Work with outside agencies on Memorandums of Understanding / Interconnection Service Agreements, and other senior level agreements etc.

Requirements

• Proven in-depth knowledge of Cybersecurity principles technologies, and processes.
• Ability to support high visibility or high priority projects
• Ability to interface with senior leadership
• Familiarity with performing assessments for Unclassified and Classified environments
• Experience with NIST 800-53, Security Development
• Ability to adapt to process changes
• A minimum of 2 years of experience in conducting security assessments by reviewing security controls with the ISSO/ISSM and guide programs through RMF process.
• *TS/SCI required*
• Proven expertise with assessing security controls in accordance with NIST Special Publications (i.e.: NIST 800 Series)
• Travel 25% of time
• A minimum of 2 years of Information Technology Information Assurance, or Cyber Security engineering experience.
• Possession of excellent oral and written communication skills
• Bachelor’s Degree in Engineering, Computer Science, or 8 years IT field experience in lieu of degree; Master’s Degree preferred

Benefits

• Collaborative Environment: Be part of a dynamic team that thrives on collaboration and innovation, fostering a supportive and intellectually stimulating workplace.

Training + Development

Interview process

Visa Sponsorship

Security clearance