Information Systems Security Manager

Job Type
Full-time

Description

Pueo is seeking an experienced Information Systems Security Manager to join our unique team of multidisciplined experts onsite in McLean, VA. 

We are seeking an ISSM that will be responsible for ensuring the security and maintenance of information systems in their assigned programs throughout the Risk Management Framework (RMF) lifecycle, from preparing through decommission, in accordance with Intelligence Community Directives (ICD) and Defense Intelligence Agency (DIA) policies. The ISSM manages and controls changes to the system or application, assesses the potential cybersecurity impact of those changes, provides technical expertise and continuous monitoring.

The Information Systems Security Manager will be responsible for the following but not limited to: 

 

System Security Management (RMF Lifecycle) 

• Ensure the security and maintenance of assigned information systems from preparation through decommissioning, per ICD and DIA policies. 
• Manage and control changes to systems/applications and assess the security impact of those changes. 
• Maintain the Authority to Operate (ATO) and supporting authorization documentation for assigned systems. 

Assessment, Documentation & Continuous Monitoring 

• Maintain and review the Body of Evidence (SSP, SAR, POA&M) using a cyber risk management platform (XACTA / eMASS). 
• Perform continuous monitoring and track POA&M items to remediation or risk acceptance. 
• Interpret compliance and vulnerability scan results and drive remediation. 

Leadership & Oversight (Lead / X-Plus) 

• Oversee ISSM activities across multiple programs and coordinate across ISSM Reps. 
• Lead security projects and initiatives; mentor and guide junior ISSM staff. 

Requirements

 Minimum Required Qualification: 

• Active Top Secret Security clearance with SCI eligibility. Ability to obtain and maintain a CI Poly.
• Bachelor’s Degree and 12 years of experience in Cybersecurity, Information Assurance and Information Technology.
• Obtain and maintain one of the following IAT III Certification in compliance with DoD 8570.01-M and DoD Directive 8140 Cyberspace Workforce Management. (ex; CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP).
• Senior to expert knowledge and hands-on experience with RMF, NIST 800-series guidelines, FIPS, Security Assessment & Authorization (SA&A) requirements and processes, Continuous Monitoring Framework experience and its tools, Plan of Action & Milestones (POA&M) policies, and vulnerability/patch management. 
• Experience using a Cyber Risk Management Platform (e.g., XACTA/EMASS) for Workflow Automation, Compliance Standards, RMF, and Continuous Monitoring.
• Solid interpersonal and communication skills to interact with various stakeholders and team members effectively. 
• Expert hands-on experience interrupting compliance and vulnerability scanning tool reports from (XACTA, STIGS, ACAS, PRISMA, Splunk, Trellix (HBSS), and/or other vulnerability scanners). 
• Exhibit problem-solving skills and the ability to think analytically.
• Experience leading security projects and initiatives. 
• Team-player with collaboration qualities and experience working in mixed technical teams.

Desired Qualifications: 

• An active Top Secret security clearance with SCI eligibility and current CI poly.

Salary Range Estimate: 

Min $103,209 – Max $165,872. The estimate displayed represents the typical salary range for this position and is just one component of Pueo’s total compensation package for employees. Other rewards may include annual bonuses, short- and long-term incentives, and program-specific awards. In addition, Pueo provides a variety of benefits to employees.

Pueo Overview: Pueo is a National Security cyber company built to inspect, defend, harden, and continuously authorize the networks our customers depend on. We deliver mission-grade cybersecurity across defense, intelligence, homeland security, federal enterprise, and critical infrastructure. Our work connects mission-risk inspection, defensive cyber operations, continuous authorization, security engineering, and mission delivery through one accountable team.

Pueo EEO Statement: Pueo is an equal employment opportunity employer and affirmative action employer. All interested individuals will receive consideration and will not be discriminated against on the basis of race, color, religion, sex, national origin, disability, age, sexual orientation, gender identity, genetic information, or protected veteran status. Pueo takes affirmative action in support of its policy to advance diversity and inclusion of individuals who are minorities, women, protected veterans, and individuals with disabilities.