Share Email Opening Title Information Systems Security Manager (ISSM)  EOE Statement Yorktown Systems Group, Inc. is an Equal Opportunity Employer. No employee or applicant for employment is denied equal opportunity because of race, color, sex, national origin, religion, age, disability, marital status, pregnancy, sexual orientation, gender identity, genetic information, any other non-merit-based factor, or other characteristics protected by law. As part of the company's equal employment opportunity policy, Yorktown Systems Group, Inc. will also take affirmative action as called for by applicable laws and Executive Orders to ensure that minority group individuals, females, disabled veterans, recently separated veterans, other protected veterans, Armed Forces service medal veterans, and qualified disabled persons are introduced into our workforce and considered for promotional opportunities.   About the Organization Yorktown Systems Group, Inc. is a committed team of dedicated former military and civilian professionals who believe in providing ethical and quality services to Government customers. Our leadership team is composed primarily of Veterans who are now serving in a corporate environment rather than in uniform. Our customer's missions become our own and we are committed to working as a team to achieve success. Because of the depth and experiences of our corporate leadership, we can assure all our customers that "we will do what we say we can do" and will focus on our customer's missions rather than corporate goals. Our business model is based on a personal commitment from our leaders to maintain contact with our customers to continually and consistently gauge our performance. Yorktown Systems Group was founded on the idea that providing quality and ethical services with a laser focus on our customer's goals is an effective long-term business model. Our mission, therefore, is to help our customers meet their requirements and goals. The contractor will not discharge or in any other manner discriminate against any employee or applicant for employment because such employee or applicant has inquired about, discussed, or disclosed the compensation of the employee or applicant or another employee or applicant. This provision shall not apply to instances in which an employee who has access to the compensation information of other employees or applicants as a part of such employee's essential job functions discloses the compensation of such other employees or applicants to individuals who do not otherwise have access to such information, unless such disclosure is in response to a formal complaint or charge, in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or is consistent with the contractor's legal duty to furnish information.   Category Management   Description The candidate will support information system life cycle activities to include rapidly establishing systems, supporting classified proposals, scoping systems for new programs and preparing Risk Management Framework packages, conducting regular maintenance, supporting and upgrading of systems during program execution, managing program close-out and conducting de-certification activities.  The ISSM’s role is to support Yorktown Systems Group in meeting the needs of our technical customers while being compliant with Department of Defense and Intelligence Community requirements.  The ideal candidate will have a “yes!” attitude and an aptitude for collaborative problem solving and will enjoy working in a dynamic environment. Key Responsibilities Serve as Information Systems Security Manager (ISSM) for classified computers in DoD and Intelligence Community computing environments Maintain day-to-day security posture and continuous monitoring of IS including security event log review and analysis Maintain the day-to-day and operational security posture and continuous monitoring for the information system or program in accordance with NIST, and DoD.  This includes event log review and analysis Initiate protective or corrective measures when a cybersecurity incident or vulnerability is discovered and ensures that a process is in place and followed for authorized users to report all cybersecurity-related events and potential threats and vulnerabilities to the ISO/PM (Information Security Officer/Program Manager) Implement and enforce all cybersecurity policies, procedures, and countermeasures using applicable cybersecurity publications specifically DoDI 8500.01 Be trained and certified IAW DoD 8570.01-M, Information Assurance Workforce Improvement Program Ensure system security measures comply with applicable government policies Monitor and resolve the Plan of Action and Milestones (POA&M) to mitigate system vulnerabilities on assigned Information Systems Draft and/or prepare and maintain security Assessment and Authorization documentation Ensure system security measures comply with applicable government policies.  Provide configuration management and accurately assess the impact of modifications and vulnerabilities for each system. Maintain thorough understanding of NIST 800-53 controls, and determine which controls are applicable to the application, system or hardware. Provide support to the IT Director for maintaining appropriate operation information assurance (IA) posture for programs both for internal and external clients and contracts. Assist the IT Director in monitoring and resolving Plan of Action and Milestones (POA&M) to mitigate system vulnerabilities on assigned Information Systems. Conduct reviews and technical inspections (as prescribed by the IT Director or contract) to identify and mitigate potential security weaknesses and ensure that all security features applied to a system are implemented and functional.   Qualifications At least 5 years of IA/Cybersecurity experience, including demonstrated knowledge, skills, and abilities to perform the job responsibilities listed above Experience as an ISSM implementing NISPOM Chapter 8, JAFAN 6/3, DCID 6/3, ICD 503, and/or JSIG IS requirements. Have or obtain CISSP certification per DoD Directive 8570.1 within 6 months upon being hired. Have or can obtain an active TOP SECRET security clearance. Experience with Windows operating system Experience in developing external customer relationships and communications (e.g., DSS, DCSA) Customer/mission focused Excellent time management skills; keeps commitments Previous experience working as a security professional in a SAP/SCI environment Familiarity conducting vulnerability scans. Familiarity with the ODAA Baseline Standard requirements, Joint Special Access Program (SAP) Implementation Guide (JSIG) and Risk Management Framework (RMF). Excellent communications skills (written & oral), ability to conduct IS user briefings and training. NISP eMass and NIST RMF training certificates   Education BS degree in Computer Science, Electrical Engineering, or a related technical field required Must have Security+ CE certification Active Certified Information Systems Security Professional (CISSP) certification or equivalent is a plus   Clearance Possess or obtain an active TOP SECRET security clearance   Travel Minimal travel required   Location Corporate Headquarters in Huntsville, AL   Full-Time/Part-Time Full-Time   Exempt/Non-Exempt Exempt   Location Huntsville, AL - Yorktown Headquarters   This position is currently not accepting applications. To search for an open position, please go to http://YORKTOWNSYSTEMSGROUPINC.appone.com WE ALSO RECOMMEND Other Jobs Within Same Category -- None found -- Other Jobs Within 60 Miles -- None found -- Follow us

 

AppOne.comTM   ©1999-2021 HR Services, Inc. Click here for technical assistance.