Information Systems Security Manager (ISSM)

Title: ISSM

Location: Charlottesville, VA

Compensation range: $100k - 130k/yr

Employer Description:
SRC, Inc., a not-for-profit research and development company, combines information, science, technology and ingenuity across our family of companies to deliver innovative, advanced defense solutions and products that are redefining possible ® . Since 1957, our commitment to the customer and the best solution – not the bottom line – has remained a core value that guides our efforts. This passion for quality carries through to the technologies we invent and manufacture, the laboratories and facilities we build, the people we hire, and the communities we support.

Responsibilities:

• Ensure systems are operated, maintained and disposed of in accordance with internal security policies and the system security plan
• Ensure that all users have the requisite security clearances, authorization need-to-know, and are aware of their security responsibilities before being granted access to information systems   
• Report all security-related incidents
• Initiate protective or corrective measures when security incident or vulnerability is discovered
• Develop and maintain a system security plan 
• Conduct periodic reviews to ensure compliance with system security plan 
• Ensure configuration management for security-relevant information systems software, hardware and firmware is maintained and documented Ensure system recovery processes are monitored to ensure security features and procedures are properly restored
• Ensure all information systems security-related documentation is current and accessible to properly authorized individuals
• Formally notify the appropriate individuals when changes occur that might affect accreditation
• Ensure that system security requirements are addressed during all phases of the system life cycle
• Follow procedures for authorizing software, hardware and firmware use before implementation on the system
• Create/provide security education and awareness training to cleared employees
• Work collaboratively with the site Facility Security Officer to provide support when needed

What You Bring to the Team – Position Requirements:

• Bachelor’s degree and 3 or more years related secure information system experience, or any equivalent combination of education, training and experience in lieu of degree
• Working knowledge of system functions, security policies, technical security safeguards, and operational security measures
• Hold U.S. government security clearances/access approvals commensurate with level of information processed by the system
• Security+ certification is required
• Administrative knowledge of Microsoft operating systems
• Strong documentation skills
• Strong customer service skills
• Working experience with RMF, ICD 503, CNSSI 1253, NIST SP 800-53/53A, NISPOM Chapter 8, DAAPM Manual

Ways to Stand Out – Preferred Requirements:

• Experience with LINUX variants such as CentOS, Red Hat and/or Ubuntu is preferred
• D.O.D 8570 IAM level 2 certification, or ability to obtain within 6 months of hire
• Experience with DCSA tools such as eMASS, STIGs and SCAP