Information Systems Security Manager

Founded in 1989 and headquartered in Reston, Virginia, SOSi is a private defense and government solutions business specializing in advanced technology systems and mission support. Its capabilities include data science, software development, network engineering, intelligence, surveillance, and reconnaissance (ISR), and logistics. 🚀 Join SOSi at the Forefront of Cyber Defense! SOSi is on the hunt for a seasoned Information Systems Security Manager to lead cutting-edge security initiatives at Joint Base Pearl Harbor Hickam in Honolulu. In this pivotal role, you’ll architect and maintain robust cybersecurity frameworks that safeguard DoD networks and systems. Collaborate with a dynamic mix of customers, partners, and stakeholders to implement mission-critical security protocols that keep our nation's digital infrastructure secure. Ready to make an impact where it matters most? Let’s build the future of defense technology—securely. Essential Job Duties: - Assist the Cyber Security Compliance Team Lead in formulating and upholding an organized information system security program and policies that are applicable to their assigned area of responsibility. - Establish and maintain secure computer systems and networks for classified processing, and take responsibility for the administration, maintenance, and security auditing of such systems. - Develop and supervise the implementation of guidelines and policies for operational information systems security. - Manage assigned eMASS (Enterprise Mission Assurance Support Service) packages containing all security authorizations for information systems under their supervision. - Coordinate inspections, tests, and reviews of information system security. - As a key member of the team, you will be responsible for contributing your expertise and skills to help ensure the team's success in responding to security incidents and protecting organizational assets. - Practical understanding of the Assured Compliance Assessment Solution (ACAS) to support the execution of the information system patch and vulnerability management program. - Thorough understanding of Security Technical Implementation Guidelines (STIG) and ensure they are reviewed, maintained, and updated on a quarterly basis. - Ensure compliance with Configuration Management policies and procedures for authorizing the use of hardware and software on an information system. - Engage with external stakeholders to facilitate the coordination of interconnection requests and ensure that such requests are processed and approved in an efficient manner. - Maintain current knowledge of system functions, security policies, technical security safeguards, and operational security measures. - Manage, maintain, and execute the information security continuous monitoring plan. - Keep records of all security-related vulnerabilities POA&Ms and ensure that serious or unresolved violations are reported to the AO/DAO. - Evaluate any changes to the system, its environment, and operational requirements that could impact security authorization. Minimum Requirements: - An Active in-scope SECRET clearance. - Compliant with DoD 8140 DCWF 722 Advanced, Information Systems Security Manager. Masters or PH.D in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering // OR // CISM, CISSP, CISSP-ISSMP, FITSP-M, GCIA, GCIH, GICSP, or GSLC. - Ten (10) years of experience supporting cybersecurity, information assurance, systems engineering, or RMF-related activities. - Knowledge of NSA’s Commercial Solution for Classified (CSfC) solution and Cross Domain Solutions (CDS). - Thorough understanding of NIST Publication 800-53r5, Risk Management Framework, Executive Order 14028, and OMB Mandate M-22-09. - Prior experience with eMASS. - Strong communication skills and ability to coordinate tasks across functional groups.Preferred Qualifications: - An Active in-scope TOP SECRET clearance with SCI Eligibility. - Recent experience in the assessment and authorization of systems. - Practical knowledge of JIRA and Confluence. - Experience with compliance tools such as Tenable Nessus and SCAP. - Experience in program policy and process creation and oversight. Work Environment: - Working conditions are normal for an office environment. - Fast paced, deadline-oriented environment. - May require periods of non-traditional working hours including consecutive nights or weekends.Working at SOSi: All interested individuals will receive consideration and will not be discriminated against for any reason.