Information System Security Manager II

ZipRecruiter - Eglin Air Force Base, FL

Full-time - Mid Level

Eglin Air Force Base, FL

About the position

The Information System Security Manager II (ISSM II) at Global Resource Solutions, Inc. (GRS) plays a crucial role in supporting Department of Defense (DoD) agencies by overseeing the security of information systems within Special Access Programs (SAPs). This position involves daily management of security protocols, risk assessments, and compliance with security policies, ensuring the protection of sensitive information and systems.

Responsibilities

• Perform oversight of the development, implementation, and evaluation of information system security program policy.
• Conduct analysis of network security based on the RMF or JAFAN authorization process.
• Advise customers on IT assessment and authorization issues.
• Perform risk assessments and make recommendations to customers.
• Advise government program managers on security testing methodologies and processes.
• Evaluate assessment documentation and provide written recommendations for authorization to government PM's.
• Periodically review system security to accommodate changes to policy or technology.
• Develop and maintain a formal Information Systems Security Program.
• Ensure necessary technical and security training for IAOs, network administrators, and other AIS personnel.
• Develop, review, endorse, and recommend action by the AO or DAO of system assessment documentation.
• Conduct assessment tests to verify required features and assurances are functional.
• Maintain a repository for all system authorization documentation and modifications.
• Coordinate AIS security inspections, tests, and reviews.
• Develop policies and procedures for responding to security incidents and investigating security violations.
• Ensure proper protection or corrective measures are taken when an incident or vulnerability is discovered.
• Establish data ownership and responsibilities for each AIS, including accountability and access rights.
• Develop and implement an information security education, training, and awareness program.
• Evaluate threats and vulnerabilities to ascertain additional safeguards needed.
• Assess changes in the system and operational needs affecting authorization.
• Review AIS assessment plans and conduct periodic assessments of security posture.
• Ensure configuration management for security-relevant AIS software, hardware, and firmware is documented.
• Monitor system recovery processes to ensure security features are restored.
• Ensure all AIS authorization documentation is current and accessible to authorized individuals.
• Participate in self-inspections and report security incidents.
• Coordinate technical security issues outside of expertise with SSE.
• Provide expert research and analysis in support of expanding programs and responsibilities.
• Perform file transfers between local systems to storage devices.
• Provide leadership, mentoring, and quality assurance for team members.

Requirements

• Seven (7) to Nine (9) years related experience.
• Bachelor's Degree in a related area or equivalent experience (Four (4) years).
• Must meet position and certification requirements outlined in DoD Directive 8570.01-M for Information Assurance Technician Level 3 within 6 months of the date of hire.
• Current Top Secret Clearance with SCI Eligibility.
• Eligibility for access to Special Access Programs.
• Willingness to submit to a Counterintelligence Polygraph.

Nice-to-haves

• Working knowledge of Microsoft Office (Word, PowerPoint, and Excel).
• Familiarity with security policy/manuals and appropriate DCIDs/JAFANs and other guiding policy documents.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Short/long term disability insurance
• Life insurance
• Retirement plan