Information System Security Manager 2

Inovex Information Systems

Full-time - Mid Level

11-50 employees

Professional, Scientific, and Technical Services

About the position

The Information System Security Manager (Level 2) at RealmOne is responsible for overseeing the Information Assurance program, ensuring compliance with security policies and standards, and managing the operational security posture of information systems. This role involves collaboration with various stakeholders to enhance cybersecurity measures, conduct risk assessments, and support the implementation of security solutions. The position is critical in safeguarding national security through effective management of cybersecurity initiatives and risk management practices.

Responsibilities

• Provide management support for an Information Assurance program.
• Propose, coordinate, implement, and enforce Information System Security policies and standards.
• Manage operational security posture for an Information System or program.
• Assist ISSEs and ISSOs with evaluating security solutions for classified information.
• Manage vulnerability/risk assessment analysis to support security authorization.
• Support configuration management for information system security software, hardware, and firmware.
• Manage changes to systems and assess the security impact of those changes.
• Prepare documentation reviews including SSPs, Risk Assessment Reports, and C&A packages.
• Support security authorization activities in compliance with DoD RMF process and DIACAP.
• Perform requirements gathering and analysis of security needs.
• Collaborate with engineers on systems integration efforts.
• Plan and coordinate implementation of IT security programs and policies.
• Analyze user needs to determine functional requirements.
• Gather and organize technical information about security products and programs.
• Perform risk analysis and enable Government planning for information security services.
• Provide daily oversight and direction to contractor ISSOs.
• Oversee engineering staff to design and implement security solutions.
• Interact with customers and corporate officers to achieve cybersecurity objectives.

Requirements

• 10 years of work-related experience in security authorization.
• Knowledge of current security tools, HW/SW security implementation, and communication protocols.
• Familiarity with commercial security products and security incident management.
• Bachelor's degree in Computer Science or a related field, or 4 additional years of experience in lieu of a degree.
• DoD 8570 compliance with IAM II certification is required.
• Active Security Clearance with appropriate Polygraph.

Nice-to-haves

• Experience with encryption tools and techniques.
• Participation in tech councils or industry initiatives.

Benefits

• Healthcare Coverage with 100% or majority company-paid premiums.
• 401K with 10% total contribution including 5% safe harbor and 5% annual profit share.
• 4 weeks starting PTO, 11 federal holidays, and 2 floating holidays.
• $7,500 annual Educational & Professional Development Assistance.
• Paid parental leave and adoption assistance.
• Flexible work schedules and generous referral bonus program.