Agile Care Enterprises, LLC ยท 1 day ago
Information Systems Security Manager (ISSM)
Maximize your interview chances
Insider Connection @Agile Care Enterprises, LLC
Get 3x more responses when you reach out via email instead of LinkedIn.
Responsibilities
Develop and maintain a DHA organizational or system-level cybersecurity program related to cybersecurity requirements, objectives policies, processes, and procedures.
Ensure that information owners and stewards associated with Department of Defense (DoD) information received, processed, stored, displayed, or transmitted on each DoD Information System (IS) or Platform Information Technology (PIT) system are identified to establish accountability, access approvals, and special handling requirements.
Maintain a repository for all organizational or system-level cybersecurity related documentation.
Ensure that Information Systems Security Officers (ISSO) are appointed in writing and provide oversight to ensure that they are following established cybersecurity policies and procedures.
Monitor compliance with cybersecurity policy, as appropriate, and review the results of such monitoring.
Ensure that cybersecurity inspections, tests, and reviews are synchronized and coordinated with affected parties and organizations.
Act as the primary cybersecurity technical adviser to the Authorizing Official (AO).
Report incidents to the AO and all other appropriate reporting chains.
Work with the Program Management Office (PMO) to ensure that the correct Risk Management Framework (RMF) Process is being followed.
Maintain documentation of Plans of Action and Milestones (POA&M).
Develop cybersecurity self-assessment results and evidence with the assistance of necessary vendors during Information Assurance Validation Readiness Review (IAVRR) to help determine if the system security is sufficiently mature to execute the IA certification test event.
Participate in RMF Team Meetings, as required.
Develop RMF documentation as required (with the assistance of necessary vendors and stakeholders, if applicable) to ensure the information is current, accurate, and applicable to the article of test.
Utilize Enterprise Mission Assurance Support Services (eMASS) for the documentation of test evidence and risk assessment for each system.
Qualification
Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.
Required
Must be a U.S. Citizen
Current active Secret Level Security Clearance
Strong analytical and problem-solving skills
CompTIA Security+
CISSP, CISM, or similar certification
BA/BS and 5+ years of experience or an additional 4 years of experience may be considered in lieu of a degree.
Fifteen years (15) of hands-on experience with Information Technology to include three of the following areas: Systems Requirements, project management and strategic planning, HIPAA requirements, Medical Systems, DoD Medical, Operational Requirements, Enterprise Strategic Planning, Unix/Linux system software, Test & Evaluation, and Training.
Demonstrated comprehensive knowledge DOD military specifications and standards.
Ability to plan and organize work and interact with technical and non-technical personnel translating user requirements into responsive applications.
Demonstrated detailed knowledge of IA concepts and requirements.
System design integration planning for multiple large-scale installations.
Hardware and software Evaluation
System Test and Evaluation, planning execution and/or management.
System requirements planning and oversight.
Knowledge of intrusion detection methodologies and techniques for detecting host and network-based intrusions.
Knowledge of controls related to the use, processing, storage, and transmission of data.
Knowledge of encryption algorithms.
Knowledge of the organization's enterprise information technology (IT) goals and objectives.
Knowledge of risk management and incident response
Understanding of FISMA and HIPAA IA requirements.
Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).
Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.
Knowledge of new and emerging information technology (IT) and cybersecurity technologies.
Knowledge of vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins).
Bachelor's degree or 15+ years of experience in lieu of degree
Preferred
DoD 8570 Certification is a plus.
Certified Information Systems Auditor
CEH certification
Technical Training in cybersecurity, Information Technology, Medical Systems, Network Design, Strategic Planning, and/or HIPAA law.
Possesses certification in order to meet compliance with 8570 categories of CND Auditor, CND Analyst, CNDSP Manager, CND Incident Responder, CND Infrastructure Support, IASAE I or IASAE II.
Benefits
Medical
Dental
Vision
401K
Wellness program
Paid time off (PTO)
Paid holidays
Company
Agile Care Enterprises, LLC
Agile Care Enterprises Technologies LLC is a premiere veteran's owned IT services and cybersecurity consultancy serving organizations committed to preserving our past, securing our present and assuring our future.