Lead Information Systems Security Manager at Booz Allen managing Risk Management Framework authorization and continuous monitoring of IT systems in compliance with security policies.
Responsibilities
Serve as a Lead Information Systems Security Manager (ISSM)
Responsible for Risk Management Framework (RMF) authorization of assigned Information Systems (IS)
Ensure systems are operated, maintained, and disposed of according to security policies
Conduct periodic assessments of authorized systems
Address corrective actions for identified findings and vulnerabilities
Perform continuous monitoring activities for authorized systems
Analyze collected audit records and system vulnerability management cycle
Monitor incident recovery processes
Requirements
Experience with NIST 800-53, ICD 503, and RMF practices
Security Technical Implementation Guides (STIGs)
expertise in computer networking and operating systems
development of Assessment and Authorization (A&A) artifacts
assess, document test or analysis data to show cybersecurity compliance
set up auditing dashboards and review results in SPLUNK
conduct risk analysis
review ACAS, CVEs, plugins, CWEs
collaborate with System Administrators to mitigate identified vulnerabilities or author Plans of Action and Milestones (PO&AM)
knowledge of National Industrial Security Program Operating Manual (NISPOM)
knowledge of Joint Special Access Program Implementation Guide (JSIG)
knowledge of Intelligence Community Directives (ICD) 503 and 703
knowledge of RMF process and associated NIST publications
knowledge of DD 254 requirements from an information security perspective
ability to configure and run security scans with Tenable products
TS/SCI clearance with a polygraph
HS diploma or GED
IAM Level III Certification (including CISSP, GSLC, or CISM Certification)
Benefits
health, life, disability, financial, and retirement benefits
Senior Data Engineer architecting and overseeing the implementation of scalable data ecosystems. Driving AI integration into data pipelines while mentoring junior engineers at Red Hat.
Data Engineer working on enhancing security data visibility within Red Hat’s product security team. Building data pipelines and integrating AI for data workflows, based in North Carolina.
Senior Product Security Engineer managing security vulnerabilities across Red Hat software and OSS projects. Leading incident response and ensuring compliance with EU Cyber Resilience Act.
Patrol Officer creating a secure environment for patients at Health Sciences Centre. Enforcing laws and assisting in medical and nursing staff in Winnipeg, Canada.
Network Security Engineer at Eurobank leading the design of network security architectures. Collaborating with teams to ensure compliance and effective network security implementations in a banking environment.
OT (Cyber) Security Officer responsible for securing IT and OT systems in large infrastructure projects. Collaborating with a security team to develop cybersecurity strategies and incident responses.
Cyber Security Consultant at NewTec aiding clients in implementing security measures and management plans. Engaging in project diversity with experienced specialists in a supportive environment.
Technical Security Engineer supporting national security by implementing security solutions for government clients. Collaborating with teams to assess vulnerabilities and protect mission data.
ISSO providing advanced cyber solutions for government clients. Leading security assessments and mitigation planning to secure mission - critical systems.
Cybersecurity Manager leading threat intelligence and SIEM solutions initiatives for a global accounting firm based in Taguig. Plan and direct resources for successful project outcomes while mentoring junior staff.