Information Systems Security Manager
Core
Classified cyber assurance expert building GRC and RMF processes for the Software organization to ensure regulatory compliance for classified information systems.
Role type
Senior IC Information Systems Security Manager (Cyber Assurance)
Builds
Automated tools for security policy assessment, auditing, and enforcement at scale; GRC suite for classified systems.
Domain
Nuclear energy / Classified government systems / Cybersecurity
Required skills
RMF lifecycle management, regulatory compliance, engineering fundamentals, trade studies, NIST 800-53, 7-step RMF process, 10 CFR Part 810, ATOs, COMSEC procedures
Preferred skills
Building classified spaces from ground up, fast-paced engineering environments, writing complex software in regulated environments
Technologies
NIST 800-53, 10 CFR Part 810, COMSEC
Responsibilities
Own the RMF lifecycle to ensure regulatory compliance for classified information systems; Collaborate with internal engineering teams to own regulatory overhead risk; Work with software engineers to evaluate and build automated tools for security policy assessment; Work with government partners to plan and coordinate external audits and tests; Assist in building out the GRC suite of tools; Build security into the operational model as a first-order requirement.
Seniority
Senior, hands-on IC
