Information System Security Manager (ISSM)

Applied Research Associates (ARA), Inc.  has an immediate need for an experienced IT Professional to serve as an Information System Security Manager (ISSM) for ARA’s Integrated Missions Systems (IMS) located in Raleigh, NC.  The candidate designated as ARA’s ISSM will support multiple programs applying Information System (IS) security principles, practices, and procedures under Risk Management Framework (RMF) to maintain compliance with appliable security regulations, such as NIST, CNSSI, and 32 CFR Part 117 (NISPOM), DAAPM, ICD 705, and JSIG governing the development and management of classified information systems.

ISSM will be responsible for managing the ISSO and ISSE teams by providing guidance and support pertaining to day-to-day operations.  For this position, ARA will only consider applicants with an active SECRET Security Clearance or higher.

Position is not eligible for remote work schedule.

What you’ll do as an Information Systems Security Manager (ISSM):


* Develop, maintain and overseeing the system security program and policies implemented across multiple connected and disconnected information systems.


* Coordinate, review, validate, and approve all activities, which contribute to the Assessment and Authorization (A&A) of automated information systems.


* Collaborate with Project Managers (PMs) or Information System Owners (ISO) in maintaining current authorization to operate, and approval to connect for all systems and networks, and in implementing corrective actions identified in the plan of action and milestones.


* Develop policy, guidance, and establish implementation and oversight plans to ensure compliance with Risk Management requirements.


* Develop and maintain a comprehensive System-level Continuous Monitoring (SLCM) strategy and monitor any proposed or actual changes to the system and its environment.


* Conduct recurring Cybersecurity reviews on information systems in accordance with DoD RMF practices, DCSA Assessment and Authorization Process Manual (DAAPM), NIST 800-53 Special Publications, customer directives, and company policies as applicable.

Execute the security testing and evaluation to ensure the correct implementation of security requirements.


* Manage various government security reviews.


* Supervise and provide guidance and technical training to ISSOs, ISSEs within the IMS Cybersecurity Services team.


* Performs other duties as assigned.

Information Systems Security Manager (ISSM) Position Requirements:


* 6-8 years of previous experience as an ISSM or ISSO is required.


* Bachelor’s degree with 8-10 years of experience, Master’s with 6-8 years of experience or equivalent professional experience (at least 14 years) will be considered for talented candidates without a degree.


* Must possess, at a minimum, an active Secret clearance.


* Experience with security assessment/hardening tools, i.e., STIGs, SCAP, ACAS, etc.


* Experience w...