Information Systems Security Manager (ISSM)

We are seeking an experienced and highly motivated Information Systems Security Manager (ISSM) to lead the security management and compliance activities for information systems supporting our organization. The ISSM will be responsible for ensuring systems are securely designed, implemented, operated, and maintained in accordance with organizational security policies, regulatory requirements, and applicable cybersecurity frameworks., * Implement the risk management framework for classified systems, typically following the Defense Counterintelligence Security Agency (DCSA), DAAG or JSIG process and supporting communications with cognizant security authorities.

• Serve as the primary point of contact for classified systems.
• Produce and maintain Body of Evidence (BoE) documentation to include risk assessments, System Security Plan (SSPis) and Plan of Action and Milestones (POA&Mis).
• Maintain the day-to-day security posture and continuous monitoring for all systems, including patching and updates.
• Assist Information Security team in unclassified security operations, including continuous monitoring, incident response, and vulnerability management.
• Assist Information Technology team in unclassified services functions.
• Ensure all users have the requisite security clearances, authorization, need-to-know, and are aware of their security responsibilities before granting access to the information systems.
• Ensures adherence to these information system security policies and procedures.
• Coordinate vulnerability management, security assessments, penetration testing, and remediation activities.
• Performs oversight and provides guidance for media sanitization and destruction.
• Confirms domain/local policies are configured to meet regulatory requirements.
• Assesses changes to the system/operational needs that could affect its accreditation.
• Voting/veto member of the CCB for all systems.
• Assists with coordination between Kratos and Defense and Government authorities regarding system security posture requirements.
• Participate in information system security inspections, tests, and reviews.
• Maintains a working knowledge of system functions, security policies, technical security safeguards and operational security measures.
• Schedules periodic testing to evaluate the security posture of IS.
• Develops an effective information system security education, training, and awareness program.
• Interfaces with internal and external customers and auditors, program managers, IT, security staff, etc.
• Support security incident response, investigations, and corrective actions.

Other Job Functions

• Serve as a member of the Configuration Control Board as necessary
• Other duties as assigned

SUPERVISORY RESPONSIBILITY:

Coordination of Information System Security Officers (ISSO) and System Administrators (SysAdmins)

Other duties as assigned Keyword: Information Systems Security Manager (ISSM)

• U.S. Citizenship required.
• Thorough understanding of US Government (specifically DoD) IS security policies.
• Strong communication skills, strong critical thinking and problem-solving skills; self-motivated with ability to effectively prioritize multiple projects; ability to work with people in a team environment and deal effectively with changing project priorities.
• Ability to manage time, make sound decisions, take independent action, analyze problems and provide focused solutions.
• High degree of attention to detail.
• Must have active in-scope TOP SECRET clearance and be able to obtain and maintain access to Sensitive Compartmented Information (SCI) and/or any necessary Special Access Programs (SAP).
• DoD 8140/DoD 8570 approved (IAM Level 2-3) certification required within 6 months of hire., * Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field; equivalent experience may be considered.
• 5+ years of experience in Information Technology (IT) in a classified environment, or 3+ years of experience as an ISSM/ISSO in government/industrial security or an intelligence career field.
• Strong understanding of identity and access management, endpoint security, network security, logging/monitoring, and incident response
• Experience administering Windows and Linux operating systems, experience with large-scale server systems, thin client architecture, system virtualization and other related peripherals.
• Strong understanding of cybersecurity frameworks such as NIST CSF, NIST SP 800-53, RMF, ISO 27001, CIS Controls, or equivalent.

This position involves work in an office and laboratory environment and could require the use of personal protective equipment (PPE) including:

• Safety glasses
• Hearing protection (varied based on tasks)
• Shoe covers
• Physical Demands
• Perform work using a computer for extended periods of time.
• Sit or stand for extended periods of time without leaving the work area.
• Climb ladders and stairs.
• Walk for considerable distances.
• Lift objects up to 50 pounds.
• Reach for objects above head or below waist.
• Stoop or crouch by bending at the waist or by bending legs.
• Withstand exposure to low and high temperature levels that result in possible body discomfort.