Information Systems Security Manager

Key Responsibilities:

• Develop, implement, and maintain information security policies, procedures, and controls in compliance with government regulations, including NIST SP 800-171, DFARS, and ITAR.
• Maintains Authorities to Operate (ATOs)
• Conduct regular security assessments and audits to identify vulnerabilities and ensure compliance with contractual and regulatory requirements.
• Coordinate with government agencies, auditors, and other stakeholders to ensure compliance with security requirements and regulations.
• Monitor and respond to security incidents, including conducting investigations and implementing corrective actions as needed.
• Manage security tools and technologies, such as firewalls, intrusion detection/prevention systems, and encryption tools, to protect against cyber threats.
• Provide guidance and support on security best practices and procedures.
• Stay current on emerging threats and technologies in the defense and cybersecurity domains.
• Prepare and present reports to senior management and government stakeholders on the organization's security posture and compliance status.

Qualifications:

• Bachelor's degree in computer science, information technology, or a related field.
• IAT Level III Certification (CISSP, etc.)
• TS/SCI Clearance
• 5+ years of experience in information security in a government defense contracting environment preferred.
• Deep understanding of government security regulations and standards, including NIST SP 800-171, DFARS, and ITAR.
• Strong knowledge of security technologies and tools, including firewalls, IDS/IPS, SIEM, and encryption.
• Excellent understanding of security risk management principles and practices.
• Experience leading security incident response and investigations.
• Familiarity with CERT/CISA Advisories preferred.
• Familiarity with JSIG preferred.