Information Security Manager - III - ISM03 - Multi Year Salaried Role
Hybrid in Arlington, VAOur client is supporting a U.S. Government customer to provide support for onsite incident response to civilian Government agencies and critical asset owners who experience cyber-attacks, providing immediate investigation and resolution. Contract personnel perform investigations to characterize of the severity of breaches, develop mitigation plans, and assist with the restoration of services.
Responsibilities: - Provide support to plan, coordinate, and implement the lab's information security
- Provide support for facilitating and helping the lab identify its current security infrastructure and defining future programs, design and implementation of security related to lab systems
- Assist the efforts of security staff to design, develop, engineer and implement solutions to security requirements
- Responsible for implementing and developing the DHS IT security
- Gather and organize technical information about the lab's mission goals and needs, existing security products, and ongoing programs
- Perform risk analyses which also includes risk assessment
- Provide support to plan, coordinate, and implement the lab's information security
- Provide support for facilitating and helping the lab identify its current security infrastructure and define future programs, design and implementation of security related to lab systems
- Possess and apply expertise on multiple complex work assignments which are broad in nature, requiring originality and innovation in determining how to accomplish tasks
- Ability to apply a comprehensive knowledge across key tasks and high impact assignments
- Plan and lead major technology assignments
- Evaluate performance results and recommending major changes affecting short-term project growth and success
- Function as a technical expert across multiple project assignments.
Required Skills: - U.S. Citizenship
- Must have an active TS/SCI clearance
- Must be able to obtain DHS Suitability
- 5+ years of directly relevant experience in information security
- Knowledge of Computer Network Defense (CND) policies, procedures, and regulations
- Knowledge of defense-in-depth principles and network security architecture
- Knowledge of boundary protection and enclaving
- Knowledge of authentication and access management technologies
- Knowledge of several of the following areas is required: Understanding of business security practices and procedures; current security tools available; hardware/software security implementation; different communication protocols; encryption techniques/tools; familiarity with commercial products, and current lab infrastructure technology
- Ability to serve as an Information System Security Officer (ISSO)
- Must be able to work collaboratively across physical locations.
Desired Skills: - DHS experience
- Cybersecurity skills including threat hunting.
- Advanced knowledge of RMF framework
- Experience working ATO's
Required Education:BS Information Management, Cybersecurity, Computer Science, or related degree; or HS Diploma and 7+ years information security experience.
Desired Certifications:CISSO, CISM, CISSP