Provide cybersecurity and Risk Management Framework (RMF) support to systems and applications for the Test Resource Management Center (TRMC).
Work with military, government, and contractor personnel to provide technical and policy direction grounded in Department of Defense (DoD) policy, and act as the Subject Matter Expert (SME) with the cybersecurity domain and lead ISSOs.
Review Cybersecurity tool reports, ACAS, HBSS, for the purposes of reporting and compliance.
Provide recommendations to the SISO, PM, and AO regarding remediation and mitigation of identified vulnerabilities on test reports and plan of action and milestones (POA&Ms).
Monitor system status updates and report to senior leadership.
Includes monthly executive reports, vulnerability reports, JFHQ DODIN reporting and briefing.
Monthly executive briefing to SISO, PM on security metrics.
Draft and present RMF deliverables to senior leadership.
Work directly with a distributed team to reduce travel.

TS/SCI required
A minimum of 2 years of Information Technology Information Assurance, or Cyber Security engineering experience.
A minimum of 2 years of experience in conducting security assessments by reviewing security controls with the ISSO/ISSM and guide programs through RMF process.
Bachelor’s Degree in Engineering, Computer Science, or 8 years IT field experience in lieu of degree; Master’s Degree preferred
Proven expertise with assessing security controls in accordance with NIST Special Publications (i.e.: NIST 800 Series)
Proven in-depth knowledge of Cybersecurity principles technologies, and processes.
Experience with NIST 800-53, Security Development
Familiarity with performing assessments for Unclassified and Classified environments
Ability to adapt to process changes
Ability to interface with senior leadership
Ability to support high visibility or high priority projects
Possession of excellent oral and written communication skills.

Information System Security Manager, ISSM

Key skills