Information Systems Security Manager (ISSM)

Position: ISSM Location: Fairfax, VA (onsite)

Clearance: TS/SCI

Salary Range: $170,000 - $195,000

Job Description:

The Mission Essential Group, LLC (MEG), is a premier service provider of information management solutions for complex, mission-critical needs. MEG has earned a reputation as an innovator and pioneer. Headquartered in Fairfax, VA, MEG employs professionals in offices located throughout the United States and around the world. MEG offers a competitive benefits package including a competitive salary; medical, dental, vision, life and disability insurance; paid time off; and retirement benefits.

MEG is a leading provider of Information Management system engineering, software development, information assurance, system sustainment. MEG supports the Integrated Broadcast Service (IBS) enterprise, the worldwide Department of Defense (DoD) joint program for delivering intelligence, surveillance & reconnaissance (ISR) and targeting data to all levels of tactical and strategic operational users.

IBS provides global, 24/7, dissemination of time sensitive Indications & Warning and Force Protection data to Joint Warfighters and Collaborating Nation partners conducting military operations around the world. MEG serves a vital role in supporting the IBS Enterprise, providing continuity in skills crucial to support military operations. MEG integrates the talents and skills of team members to form an IBS Enterprise Support Services Team to provide world-class IBS customer support.

MEG provides innovative software tools, technical services, and rapid development of solutions to support end user requirements. As such our systems and products require are high level of quality and configuration management to ensure they meet and/or exceed customer expectations.

The Information Systems Security Manager (ISSM) is a hands-on position that requires an advanced knowledge of information assurance principles and regulatory guidance to develop, certify, accredit, and maintain information systems (IS) that are integral to our customers, our business, and the success of our security program. The ISSM will lead the preparations and interactions with the government for system security assessments and ensure the IS maintains there Authority to Operate (ATO). The ISSM will manage the implementation of security policies, conduct risk assessments, manage security controls, and Plan of Actions and Milestones (POAM). The ISSM is expected to advise senior management on cybersecurity issues, communicate security risks, and collaborate with technical teams and other stakeholders. The ISSM is required to have the ability to multitask; assume ownership and accountability of risks, issues, and tasks; and successfully manage and resolve those risks, issues, and tasks to completion. The ISSM must have the ability to work well in a team-oriented environment; self-manage his/her own tasks; and provide hands-on guidance, direction, and mentoring to the technical team. Finally, the ISSM must be extremely well-organized, well written, has a keen eye for detail, and can clearly articulate information (both orally and in writing) to customers, stakeholders, peers, and leadership within and external to the Program and Organization.

Duties and Responsibilities :

• Oversee the full RMF lifecycle: categorization, control selection, implementation, assessment, authorization, and continuous monitoring
• Develop, maintain, and manage RMF documentation including:
  • System Security Plans (SSPs)
  • Security Assessment Reports (SARs)
  • Plan of Action & Milestones (POA&Ms)
  • Continuous Monitoring Strategies
• Ensure compliance with:
  • NIST SP 800-53 Rev. 5 security controls
  • NIST SP 800-37 Rev. 2 (RMF Guide)
  • DoD Cybersecurity Manual (DoDM 5200.01)
• Manage system accreditation activities with eMASS and ensure data accuracy and completeness
• Conduct and support security control assessments, vulnerability management, and mitigation tracking.
• Ensure compliance with STIGs (Security Technical Implementation Guides)
• Support audits, inspections, and cybersecurity readiness reviews
• Acts in concert with the Facility Security Officer as required.
• Renew ATOs and implement new ATOs as required
• Provide leadership in developing and maintaining company and customer IT architectures.
• Prepare, review, and oversee all Information Systems Security Plans (SSP's)
• Ensure proper Protection and/or Corrective Measures have been taken when an Incident or Vulnerability has been discovered.
• Perform Risk Assessments.
• Liaisons with client and oversight agency security authorities

Minimum Qualifications:

• Must possess an Active Top-Secret Clearance with SCI Eligibility
• Must be eligible to maintain a US Government security clearance
• Bachelor's degree in Cybersecurity, Information Security, Information Systems, Computer Science, or related field required; Master's degree preferred
• Minimum of 10 years of Information Assurance, Information Security experience, including at least 2-3 years in an ISSO or ISSM capacity.
• Working knowledge of Information Security governing regulations (NISPOM Chapter 8, applicable NIST 800-53 Rev. 5 controls, NIST SP 800-37 Rev. 2.
• Experience managing a SIPRNet connection.
• Practical knowledge of security technologies such as encryption, data protection, zero trust architecture, privileged access management.
• IAM Level III certification preferred (CISSP, CISM, GSLC CCISO, CAP, or equivalent)

Desired Experience:

• CISSP or CISM Certified
• COMSEC knowledge
• Experience administering and maintaining security packages within eMASS.
• 5-10 years SIEM experience
• Experience supporting DCSA assessments and audits.
• Extensive experience implementing and managing the Risk Management Framework (RMF) and maintaining ATO packages.

#CJ