Information System Security Manager (ISSM) - Peraton
Chantilly, VA
About the Job
Responsibilities
- Act as a technical management resource for information system security matters.
- Provides technical and programmatic Cyber Security and Information System Security Management Services to internal and external customers in support of network and information security systems.
- Ensures the development and implementation of information security policy, requirements, and procedures within an organization’s business processes.
- Reviews documentation from information obtained from customer using accepted guidelines such as RMF (Risk Management Framework).
- Provides assessment and authorization (A&A) management support by guiding the development of all documentation necessary to complete the A&A process to include system security plans, contingency plans, and other associated documentation.
- Conducts complex vulnerability assessments to include; development of risk mitigation strategies with the customer; adjudicating based on assessing the vulnerabilities, threats, and risk associated with assessment.
- Reviews system configurations and scan tool results in order to determine system compliance and report results.
- Analyzes policies and procedures against Federal laws and customer regulations and provides recommendations for closing gaps.
- Develops strategies to comply with privacy, risk management, and e-authentication requirements.
- Provides cyber security and information system security support for the development and implementation of security architectures to meet new and evolving security requirements.
- Evaluates, develops and enhances security requirements, policy and tools.
- Provides assistance in computer incident investigations.
Qualifications
- TS/SCI with Polygraph level clearance is required
- BA/BS and 12+ years of experience or Masters and 10+ years of experience; an additional 4 years of experience may be considered in lieu of a degree.
- Demonstrated experience with customer's Assessment and Authorization (A&A) process (e.g. RMF, NIST800-53, ICD503)
- Strong understanding of Cyber Security Policies
- Strong understanding of Networks and IT systems
- Strong communication skills
- Demonstrated experience working with and across teams and handling multiple projects at once.
- Understanding of strong security practices and working with Security Officers
- Candidate should have accreditation tool experience
- Candidate should have professional certifications (e.g., CISSP, CISM, CASP, CISA, Security+)
Benefits:
Peraton offers enhanced benefits to employees working on this critical National Security program, which include heavily subsidized employee benefits coverage for you and your dependents, 25 days of PTO accrued annually up to a generous PTO cap and eligibility to participate in an attractive bonus plan.
Peraton Overview
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.