Cybersecurity – Information System Security Manager (ISSM)
Core
Technical leader responsible for enforcing security policies, standards, and directives to support assessment, authorization, and continued operation of classified information systems.
Role type
Senior IC Information System Security Manager (ISSM)
Builds
Classified computing domains and enterprise information security programs
Domain
Defense/Classified Government Information Security
Required skills
Risk Management Framework (RMF) implementation, security policy enforcement, assessment and authorization (A&A) processes, continuous monitoring, incident response coordination, security compliance auditing, threat analysis, risk mitigation strategies
Preferred skills
Information System Security Officer (ISSO) experience, security tool utilization (NESSUS, ACAS, STIGs, SCAP, HBSS), test/analysis data documentation
Technologies
NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, HBSS, NIST SP 800 series, DAAPM, CNSSI 1253, ICD-503, JSIG
Responsibilities
Lead Assessment and Authorization (A&A) processes under RMF, supervise configuration management and security auditing, conduct risk assessments and incident response, develop enterprise-wide security policies and standards, mentor security staff, coordinate security assessments and audits, prepare technical reports and briefings
Seniority
Senior, hands-on IC with leadership responsibilities
