RiVidium Inc. is seeking an experienced Information Systems Security Manager – Advanced to support the NGA Defender program. The selected candidate will be responsible for managing and overseeing the cybersecurity posture of assigned programs, organizations, systems, or enclaves. The ISSM-Advanced will provide cybersecurity leadership, manage information security risks, oversee security controls, and ensure that cybersecurity requirements are integrated into system operations, development, acquisition, and continuity planning. This position requires the ability to advise senior leadership on security risks, coordinate cybersecurity assessments, monitor security effectiveness, and implement strategies that protect mission-critical information systems. Key Responsibilities - Manage and oversee the cybersecurity posture of assigned information systems, programs, organizations, or enclaves.
- Advise senior management and Authorizing Officials on cybersecurity risks, security posture, and changes that may affect organizational security.
- Develop and align information security priorities with organizational cybersecurity strategies and mission objectives.
- Manage cybersecurity resources, including budgets, staffing, contracts, and personnel, to support security goals and reduce organizational risk.
- Establish and maintain information security architecture, policies, procedures, operational guidance, and standard operating procedures.
- Evaluate cybersecurity policies, programs, systems, and processes to assess effectiveness, cost-benefit, and risk.
- Ensure security safeguards are appropriately implemented and that security improvement actions are evaluated, validated, and completed.
- Coordinate cybersecurity inspections, tests, reviews, and assessments across the network environment.
- Participate in information security risk assessments supporting the Security Assessment and Authorization process.
- Monitor cybersecurity data sources, maintain situational awareness, and collect information required for security reporting.
- Oversee cyber threat analysis and the development and dissemination of Computer Network Defense guidance and reports.
- Coordinate cybersecurity incident information with appropriate internal and external stakeholders.
- Integrate cybersecurity requirements into system development, technology acquisitions, system upgrades, and security engineering activities.
- Evaluate emerging technologies and identify their potential impact on information security and organizational risk.
- Oversee cybersecurity training and awareness programs to ensure personnel understand their security responsibilities.
- Support enterprise continuity of operations, mission assurance, and contingency planning, including cybersecurity and supply chain risk management.
- Identify security control deficiencies, noncompliance patterns, and vulnerabilities; assess associated risks and recommend mitigation strategies.
- Apply knowledge of host-based and network-based intrusion detection capabilities to support cybersecurity monitoring and defense.
- Identify critical infrastructure systems and technology components that lack appropriate security considerations and recommend corrective actions.
- Communicate cybersecurity requirements, risks, and priorities to senior leadership, technical personnel, and other stakeholders.
Required Qualifications - Degree in Computer Science, Cybersecurity, Information Technology, Software Engineering, Information Systems, Computer Engineering, Mathematics, Engineering, or a related discipline preferred.
- Required certification: CISSP-ISSMP or GSLC, with the applicable IAT, IAM, or IASAE Level III certification
- Demonstrated experience in information systems security management, cybersecurity, or information assurance.
- Knowledge of cybersecurity risk management, security controls, security architecture, and system security requirements.
- Experience evaluating security risks and recommending appropriate mitigation measures.
- Experience coordinating cybersecurity assessments, inspections, testing, and remediation activities.
- Knowledge of security incident reporting, threat analysis, intrusion detection, and network defense practices.
- Experience developing or maintaining security policies, procedures, plans, and operational guidance.
- Ability to communicate effectively with senior leadership, technical teams, and security stakeholders.
- Strong analytical, organizational, problem-solving, and documentation skills.
Preferred Qualifications - Experience supporting federal government or Intelligence Community cybersecurity programs.
- Experience managing cybersecurity requirements for mission-critical systems or enterprise networks.
- Familiarity with Security Assessment and Authorization processes and security control implementation.
- Experience with cybersecurity architecture, security engineering, and supply chain risk management.
- Experience supporting continuity of operations planning and mission assurance initiatives.
- Experience overseeing cybersecurity training, awareness, and compliance programs.
Clearance- TS/SCI required The annual salary range for this position is $165,000–$175,000. The listed salary range represents a general guideline; however, RiVidium Inc. considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate’s experience, education, skills, and current market conditions. At RiVidium Inc. it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case.
|