Perform security analysis of operational and development environments, threats, vulnerabilities and internal interfaces
Lead and implement the Assessment and Authorization (A&A) processes under the Risk Management Framework (RMF)
Facilitate development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA), Risk Acknowledgement Letters (RAL)
Supervise configuration management of assigned systems; auditing systems to ensure security posture integrity
Lead staff with assessments and test/analysis data to document state of compliance with security requirements
Conduct risk assessments and investigations, implement appropriate risk mitigations, and coordinate incident response activities
Serve as organization spokesperson on sophisticated projects and programs

Currently hold certification in good standing to satisfy IAM Level III (CISSP, GSLC, or CISM)
5+ years of combined experience and/or education in cybersecurity, IT, or a related field
5+ years of experience with the Risk Management Framework (RMF), cybersecurity policies, and RMF implementation
5+ years of experience utilizing security relevant tools, systems, and applications in support of RMF
3+ years of experience with cybersecurity leadership overseeing programs and teams
3+ years of experience communicating complex technical risks, translating impact, and advising senior leaders

Cybersecurity – Information System Security Manager

Key skills