7-9 years of related experience, especially in ISSO or ISSM roles
Expertise in Special Access Programs (SAP) security
Familiarity with Risk Management Framework (RMF) and Joint Special Access Program Implementation Guide (JSIG)
DoD 8570.01-M IAM Level II certification or equivalent
Active TS/SCI security clearance and willingness to undergo a polygraph if necessary
Responsibilities
Oversee development and implementation of security policies for information systems
Advise on RMF assessment and authorization for security issues
Conduct risk assessments and recommend measures to DoD customers
Evaluate and endorse system authorization documentation
Develop formal Information Systems Security Programs and training for personnel
Implement policies for responding to security incidents and vulnerabilities
Coordinate approvals for external information systems and verify security posture for authorization boundaries
Benefits
Comprehensive health insurance options
Retirement plan with employer matching
Opportunities for continuing education and certifications
Flexible work schedules or remote work options
Paid time off and holidays
Full Job Description
Information System Security Manager (ISSM) 2s primary function serves as a principal advisor on all matters, technical and otherwise, involving the security of information systems under their purview. Primary support will be working within Special Access Programs (SAPs) supporting Department of Defense (DoD) agencies, such as HQ Air Force, Office of the Secretary of Defense, and Military Compartment efforts. The position will provide day-to-day support for Collateral, Sensitive Compartmented Information and SAP activities.
Performance shall include:
Perform oversight of the development, implementation and evaluation of information system security program policy; special emphasis placed upon integration of existing SAP network infrastructures
Develop and oversee operational information systems security implementation policy and guidelines of network security, based upon the Risk Management Framework (RMF) with emphasize on Joint Special Access Program Implementation Guide (JSIG) authorization process
Advise customer on Risk Management Framework (RMF) assessment and authorization issues
Perform risk assessments and make recommendations to DoD agency customers
Advise government program managers on security testing methodologies and processes
Evaluate authorization documentation and provide written recommendations for authorization to government PMs
Develop and maintain a formal Information Systems Security Program
Ensure that all IAOs, network administrators, and other cyber security personnel receive the necessary technical and security training to carry out their duties
Develop, review, endorse, and recommend action by the AO or DAO of system assessment documentation
Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media
Develop and execute security assessment plans that include verification that the features and assurances required for each protection level functioning
Maintain a and/or applicable repository for all system authorization documentation and modifications
Institute and implement a Configuration Control Board (CCB) charter
Develop policies and procedures for responding to security incidents, to include investigating and reporting security violations and incidents
Ensure proper protection or corrective measures have been taken when an incident or vulnerability has been discovered within a system
Ensure that data ownership and responsibilities are established for each authorization boundary, to include accountability, access rights, and special handling requirements
Ensure development and implementation of an information security education, training, and awareness program, to include attending, monitoring, and presenting local cyber security training.
Evaluate threats and vulnerabilities to ascertain whether additional safeguards are needed
Assess changes in the system, its environment, and operational needs that could affect the authorization
Ensure that authorization is accomplished a valid Authorization determination has been given for all authorization boundaries under your purview
Review AIS assessment plans
Coordinate with PSO or cognizant security official on approval of external information systems (e.g., guest systems, interconnected system with another organization)
Conduct periodic assessments of the security posture of the authorization boundaries
Ensure configuration management (CM) for security-relevant changes to software, hardware, and firmware and that they are properly documented
Ensure periodic testing is conducted to evaluate the security posture of IS by employing various intrusion/attack detection and monitoring tools (shared responsibility with ISSOs)
Ensure that system recovery and reconstitution processes developed and monitored to ensure that the authorization boundary can be recovered based on its availability level determination
Ensure all authorization documentation is current and accessible to properly authorized individuals
Ensure that system security requirements are addressed during all phases of the system life cycle
Develop Assured File Transfers (AFT) on accordance with the JSIG
Participate in self-inspections
Conduct the duties of the ISSO if one is not present and/or available.
Required Education and Experience:
Bachelor's degree plus 7-9 years related experience with prior performance in roles such as ISSO or ISSM -OR- 11-13 years related experience with prior performance in roles such as ISSO or ISSM in lieu of degree
SAP experience.
Training and Certifications:
DoD 8570.01-M IAM Level II (in lieu of IAT Level II).
Security Clearance:
Active TS/SCI and the willingness to sit for a polygraph, if needed
About IC-CAP LLC
IC-CAP LLC Careers
There has never been a more opportune time to join the dynamic team at IC-CAP LLC, a leader in innovative solutions and professional growth in the industry.
Explore Job Opportunities
IC-CAP LLC invites professionals to be part of a company that is dedicated to fostering leadership and innovation. The team at IC-CAP LLC helps some of the most renowned companies navigate their transformation journeys with cutting-edge solutions.
Harness the power of a workplace where diversity, culture, and professional growth are prioritized to transform industries and lead market trends.
IC-CAP LLC Employment Philosophy
IC-CAP LLC is building a robust employment framework that supports not only career advancement but also personal development through diversity training and leadership workshops. This approach ensures that every team member can thrive professionally in a supportive and dynamic environment.
Engage in Meaningful Work
Join IC-CAP LLC, where job opportunities are not just positions, but pathways to personal and professional development. With a focus on innovation and leadership, employees are encouraged to take on challenges that foster industry-leading expertise and skills.
Internship Programs and Career Growth
IC-CAP LLC offers internships that provide invaluable industry experience and a stepping stone to full-time employment. Interns at IC-CAP LLC gain hands-on experience, working alongside seasoned professionals on real-world projects that matter.
Benefits of Joining IC-CAP LLC
Choosing a career at IC-CAP LLC means securing a plethora of benefits designed to nurture and enhance both professional and personal life. From comprehensive health benefits to flexible work arrangements and continuous learning opportunities, IC-CAP LLC is committed to the well-being and continuous growth of its team members.
Networking and Professional Development
IC-CAP LLC promotes a culture of continuous improvement and networking. Employees are encouraged to engage in various professional development activities, enhancing their skills and expanding their professional networks.
How to Apply
Discover the array of career paths available at IC-CAP LLC by exploring open positions that match your skills and interests. The hiring process at IC-CAP LLC respects the time and effort of all candidates, ensuring a transparent and respectful interview and selection process.
Stay Connected with IC-CAP LLC Careers
Stay informed about the latest in career opportunities and industry trends by subscribing to IC-CAP LLC job alerts. Tailor your preferences to receive updates that align with your career aspirations and professional interests.
SEARCH IC-CAP LLC JOBS
READ CAREERS BLOG
Job Alert Emails
Customize your subscription to receive job alerts, the latest news, and insider tips tailored to your preferences. Discover the exciting and rewarding opportunities that await at IC-CAP LLC.
