Army Open-Source Intelligence Office Information System Security Manager (I at SAIC

Fort Belvoir, Virginia, United States -

Full Time

Start Date

Immediate

Expiry Date

11 May, 26

Salary

0.0

Posted On

10 Feb, 26

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Information System Security, Risk Management, Vulnerability Scanning, Security Control Selection, NIST Compliance, Policy Analysis, Auditing, Technical Principles, Governance, Training, Assessment, Continuous Monitoring, Documentation, Testing, ISO Standards, Cybersecurity, Management

Industry

Defense and Space Manufacturing

Description

SAIC is seeking an Information System Security Manager (ISSM) to support the Army Open-Source Intelligence Office. This work will be preformed on site at Fort Belvoir, VA. Governance, Risk & Compliance: Performs Risk Management; Test & Evaluation; Training, Education, & Awareness; and Vulnerability Scanning & Management activities from the National Initiative for Cybersecurity Education (NICE) Framework. This work is typically categorized as security control selection, assessment, and auditing or similar oversight and assessment activities. Following NIST Risk Management practices outlined in 800-39, performs multiple functions, including one or more of the following: Categorizes systems and information stored/processed on the system based on FIPS199 and/or NIST 800-60. Selects initial baseline of applicable security controls based on FIPS 200 and/or NIST 800-53. May supplement the baseline with further security controls in accordance with organizational policy. Implements security controls based on numerous NIST Special Publication guidance documents, including 800-34, 800-64, and 800-128. Specifically and functionally documents implemented security controls. Assesses security controls based on NIST 800-53A to ensure they are implemented correctly and effectively. May perform testing to verify and validate. Ensures systems are authorized based on NIST 800-37. Ensures continuous monitoring is achieved based on NIST 800-137, 800-37, 800-53A, and/or other special publications. May perform internal auditing functions in support of ISO/IEC standards, such as 9000, 20000, 27001, etc. May work with external auditors to ensure these actions have been performed to industry standards. May perform policy analysis activities to author or support the authoring of new enterprise policy. KNOWLEDGE/SKILLS AND ABILITY: Applies advanced technical principles, theories, and concepts. Contributes to development of new principles and concepts. Participates with senior managers to establish strategic plans and objectives. Recommends/makes decisions on administrative or project work matters and ensures effective achievement of program, project, or organizational objectives. PROBLEM COMPLEXITY: Works on unusually complex technical problems and provides solutions which are highly innovative and ingenious. FREEDOM TO ACT: Works under consultative direction toward pre-determined long-range goals and objectives. Assignments are often self-initiated. Determine and pursue courses of action necessary to obtain desired results. Work checked through consultation and agreement with others rather than by formal review of supervisor. Exercises independent judgment in methods, techniques and evaluation criteria for obtaining results. IMPACT: Develops advanced technological ideas and guides their development into a final product. Erroneous decisions or recommendations would typically results in failur to achieve critical organizational objectives and affect image of organization's technological capability. LIASON: Serves as organization spokesperson on advanced projects and/or programs. Acts as advisor to management and customers on advanced technical research studies and applications. EDUCATION AND EXPERIENCE: Bachelors degree and fourteen (14) years of experience or Masters and twelve (12) years experience, additional years of experience may be substituted in lieu of degree CLEARANCE REQUIREMENT: Must have an active Top Secret/SCI clearance CERTIFICATION REQUIREMENT: Must meet DoD 8140 Intermediate certification standards

Responsibilities

The Information System Security Manager (ISSM) will perform risk management, security control selection, assessment, and auditing activities. They will ensure systems are authorized and continuously monitored according to NIST guidelines.