Information Systems Security Manager

• Develop and maintain the organization’s information security program, policies, and procedures.

• Ensure compliance with Federal regulations, standards, and guidelines (e.g., NIST, FISMA, FedRAMP).

• Conduct risk assessments and vulnerability analyses to identify potential threats and weaknesses.

• Implement security controls and mitigation strategies to safeguard information systems.

• Monitor and audit information systems to ensure ongoing compliance and effectiveness of security measures.

• Provide security training and awareness programs for employees.

• Coordinate with Federal customers and other stakeholders on security-related matters.

• Lead incident response efforts, including investigation, containment, remediation, and reporting.

• Manage and oversee the certification and accreditation process for information systems.

• Stay current on emerging cybersecurity threats, technologies, and best practices.

• Must be a U.S. citizen and have the ability to obtain and maintain a Secret security clearance.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• 5+ years of relevant cybersecurity experience, with a focus on Federal systems and risk management
• Strong understanding of Federal security standards and frameworks, such as FISMA, NIST, and FedRAMP.
• Experience with risk assessment and management, vulnerability analysis, and incident response.
• Experience with security tools and technologies including firewalls, intrusion detection/prevention systems, and SIEM.
• Excellent communication and interpersonal skills, with the ability to effectively communicate security concepts to non-technical stakeholders.
• Certified Information Systems Security Professional (CISSP), CISM, or equivalent certification.
• Experience with implementing and managing security controls in cloud environments.
• Proven experience in developing and implementing information security programs.
• Ability to work independently and manage multiple tasks and priorities in a fast-paced environment.
• Strong analytical and problem-solving skills, with keen attention to detail.

Gray Analytics values our employees as our most important resource. To showcase these values, we offer not only traditional medical, disability, life, etc. coverages that begin on day one of employment, but also unique benefits to improve our employees’ quality of life. Some of these unique benefits include:

• A PTO policy based on total years of experience, not years of service to the company. PTO is available for use immediately at hire, subject to company needs.
• Eligibility for 401K contributions and company matching, Pet Insurance through Spot, Flexible Spending Account, and Tuition and Professional Development Funds begin on day one of employment.
• Charitable donations program on a yearly and quarterly basis where employees can nominate a non-profit of choice to receive donations.

Gray Analytics is an Equal Opportunity Employer and VEVRAA Federal Contractor. This contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a) and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on their race, color, religion, sex, gender identity, sexual orientation, or national origin. Moreover, these regulations require that covered prime contractors and subcontractors take affirmative action to employ and advance in employment individuals without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, protected veteran status or disability. Gray Analytics, Inc. welcomes minority and veteran applicants.