Information System Security Manager

Information System Security Manager
Information System Security Manager, SME
Hill Air Force Base
Ogden, Utah

HX5 is an award-winning provider of engineering, research and development, and technical services to clients such as NASA and the Department of Defense. Founded in 2004, HX5 is a fast-growing veteran- and woman-owned company with locations nationwide.

HX5 is currently seeking a qualified Information System Security Manager in support of the Munitions Sustainment Division at Hill Air Force Base in Ogden, Utah.

Essential Duties and Responsibilities:

• Perform the ISSM duties as outlined in DoDI 8510.01, DoDI 8500.01, AFI 17-101, AFI 17-130, and AFMAN 17-1303 for assigned systems/applications.

• Support implementation of the Risk Management Framework (RMF).

• Develop and maintain a formal Information Systems (ISs) security program and policies for their assigned area of responsibility.

• Supporting the system/application authorization and accreditation (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks, and resulting artifacts mandated by governing DoD and Air Force policies (i.e., RMF).

• Ensure proper measures are taken when an IS incident or vulnerability is discovered.

• Maintain and report IS and PIT system assessment and authorization status and issues in accordance with DoD and USAF guidance.

• Provide direction to the ISSO in accordance with DoDI 8500.01, AFMAN 17-1303, As well as AFI 17-101 (6 Feb 2020)

• Ensure that ISSOs are appointed in writing and provide oversight to certify they are following established cybersecurity policies and procedures.

• Coordinate with the organization's security manager to ensure issues affecting the organization's overall security are addressed appropriately.

• Ensure that ISOs and stewards associated with DoD information received, processed, stored, displayed, or transmitted on each DoD IS and PIT system are identified in order to establish accountability, access approvals, and special handling requirements.

• Maintain a repository for all organizational or system-level cybersecurity-related documentation.

• Monitor compliance with cybersecurity policy, as appropriate, and review the results of such monitoring.

• Ensure that cybersecurity inspections, tests, and reviews are synchronized and coordinated with affected parties and organizations.

• Ensure implementation of IS security measures and procedures including reporting incidents to the AO and appropriate reporting chains, and coordinating system-level responses to unauthorized disclosures in accordance with DoD Manual 5200.01, Volume 3 for classified information or DoD Manual 5200.01, Volume 4 for Controlled Unclassified Information (CUI), respectively.

• Ensure handling of possible or actual data spills of classified information resident in ISs, are conducted in accordance with DoD 5200.01, Volume 3.

• Act as the primary cybersecurity technical advisor to the AO for DoD IS and PIT systems under their purview or as assigned by USG.

• Ensure that cybersecurity-related events or configuration changes that may impact DoD IS and PIT systems authorization or security posture are formally reported to the AO and other affected parties, such as IOs, stewards, and AOs of interconnected DoD ISs.

• Ensure the secure configuration and approval of IT below the system level (i.e., products and IT services) in accordance with applicable guidance prior to acceptance into or connection to a DoD IS or PIT system.

• Obtain an ITIPS and EMASS account and ensure that ISSOs author, monitor, and record system information in applicable databases. Prepare and record system, security status, and portfolio management information into the Enterprise Mission Assurance Support Service (eMASS) for Federal Information Security Management Act (FISMA); ITIPS for general system information as required; Clinger Cohen Act; and other statutory compliance etc.

• Author, review, certify, and/or maintain information awareness (IA) and security management plans to include RMF Implementation Plans, System Security Management Plans, Information Support Plans, Program Protection Plans (PPPs), Security Risk Analyses, Security Vulnerability and Countermeasure Analyses, Security Concepts of Operations, Operational Security (OPSEC) Plans, and other system/network security related documents.

Education andExperience:
Minimum Recommended Education:

• Master's degree and twelve (12) years of directly related experience.
• Bachelor's degree, and fifteen (15) years of directly related experience.
• OR twenty (20) years of directly related experience.
• DoD 8570 compliant IAM Level II or III certification, such as the GIAC (Global Information Assurance Certification) Security Leadership Certification (GSLC), Certified Information Security Manager (CISM) and/or Certified Information Systems Security Professional (CISSP) is required. Note: CISSP is most common and applicable to applications.

Position Type/Expected Hours of Work:

This is a full-time position requiring 40 hours per week and offers a flexible work schedule Monday through Friday during core business hours.

Other Position Requirements:

• Proof of U.S. Citizenship or U.S. Permanent Residency is a requirement for this position.
• Must be able to complete a U.S. government background investigation.
• Must be able to obtain a Top Secret clearance.
• Must be able to travel, including air travel.

HX5 offers a competitive salary and benefits package to include:

• Medical/Dental/Vision Insurance
• 401(k) plan with Company Match
• Paid Holidays
• Paid Time Off
• Parental Leave
• Life Insurance
• Tuition Reimbursement
• Identity Protection
• Medical and Dependent Care Flexible Spending Accounts
• Commuter/Transit Spending Accounts
• Group Legal Coverage Options
• Pet Insurance

HX5, LLC is an Equal Opportunity Employer that recruits and hires qualified candidates without regard to race, religion, sex, sexual orientation, gender identity, age, national origin, ancestry, citizenship, disability, or veteran status.

HX5, LLC is a Drug Free Workplace Employer.

ACCESSIBILITY NOTICE:
If you need a reasonable accommodation for any part of the employment process due to a physical or mental disability, pleasecall (850) 362-6551.

CJ