Information Systems Security Manager (ISSM)

• Create and maintain Risk Management Framework (RMF) Body of Evidence materials
• Harden and perform certifications on new classified systems
• Obtain and maintain Authorizations to Operate (ATOs)
• Technical support of classified system hardware and software MUSAs, ISOLANs, and WANs
• Ensure all aspects of audits and vulnerability scanning, ensuring systems are being operated securely and computer security policies and procedures are implemented
• Application of diagnostic techniques to identify problems, investigate causes, and implement solutions
• Maintain and audit various classified Customer networks
• Coordinate requirements for new computer systems
• Provide Security configuration advice to Program Leadership
• Clearly articulate technical information to both technical and nontechnical audiences
• Perform self-inspections and develop procedures
• Assist with DCSA and Special Access Program Inspections as needed
• Contribute to Cybersecurity Maturity Model Certification (CMMC) monitoring

U.S. Citizenship Required. TOP SECRET US Department of War security clearance required. Candidate must be SAP and SCI program eligible., * Minimum of 5 years of Information Technology and/or DoW Security practices experience

• Hands-on technical expertise with administering enterprise classified computing, networking, and storage hardware
• Proficiency in both Windows and Linux operating systems, Windows Server, and Active Directory
• Ability to interpret complex Government regulations relating to IA management
• Plan and perform tasks diligently to minimize timeline to deployment of equipment
• Occasional travel to support classified system efforts and inspections as needed
• IAT Technical Baseline Level II or III expected

Toyon is seeking an experienced Information Systems Security Manager (ISSM). The ideal applicant would have recognized success working on classified computing systems under the NISPOM Rule 32 CFR Part 117, the DCSA Assessment and Authorization Guide (DAAG), Joint Special Access Program Implementation Guide (JSIG), and ICD Standards.

At Toyon, we pride ourselves on functioning as a cooperative and professional security team based on trust. The successful candidate will continually work to develop positive relationships as they support our security program in our fast-paced environment. Team members must have the ability to react quickly and provide authoritative security guidance to employees., The posted pay range values provide the candidate with guidance on annual base compensation for the position, at a full time level of effort, exclusive of overtime, bonus, and benefits-related compensation, over a range of qualifications that may fit hiring objectives. Toyon Research Corporation will consider the individual candidate’s education, work experience, applicable knowledge, skills and training, among other factors, when preparing an offer of employment.

Equal Opportunity Employer including Disability and Veterans