IS Security Manager

Job Summary:

The Information Systems Security Manager is responsible for maintaining compliance with applicable security regulations and performing all security related duties as required at the assigned facility(ies).

This entails the design and successful execution of an IT security program which exceeds customer expectations and minimizes security risks.

He or she must apply a comprehensive knowledge of information technology security principles, practices and procedures to develop, implement, and manage the overall information system security program to support the FSO of the facility.

Ensures assigned Information Systems (IS) are properly managed, according to the 32 CFR Part 117 in the National Industrial Security Program Operating Manual (NISPOM) and other security directives as required

Responsibilities and Tasks:


* Establishes, documents, implements, and monitors the Information System (IS) Security Program and related procedures for the facility.


* Ensures Information System (IS) compliance in accordance with the Risk Management Framework (RMF), 32 CFR Part 117 National Industrial Security Program Operating Manual (NISPOM), and the DCSA Assessment and Authorization Process manual (DAAPM).


* Ensure that other supported policies and procedures may be required for the certification and accreditation process which maybe mandated by the Customer or other U.S.

Government agency.


* Ensures the development, documentation and presentation of IS security education, awareness and training activities for IS personnel, users, and others, as appropriate.


* Conduct self-inspections to ensure that the IS function is operating as accredited and that accreditation conditions have not changed.


* Ensures the development of facility procedures to govern marking, handling, controlling, removing, transporting, sanitizing, reusing, and destroying media and equipment containing classified information.


* Reports IS security incidents to the Facility Security Officer; assuring proper protection or corrective measures have been taken when an incident/vulnerability has been discovered.


* Implements security features for the detection of malicious code, viruses, and intruders (hackers), as appropriate or needed.


* Inform the Customer, U.S Government Defense Counterintelligence and Security Agency (DCSA), and FSO of security relevant changes to accredited information systems as required.


* Responsible for developing and maintaining an IS security audit and accountability program.


* If applicable, responsible for the oversight and continued training and education of Information System Security Officer(s) (ISSO).


* Ability to translate understanding of the organization's goals and objectives into compliance requirements.


* Provides quarterly updates and presentations regarding program status.


* Solid understanding of project management principles.


* Other assigned duties, as assigned by the...