Job posting has expired

Information System Security Manager (ISSM)

Scientific Research Corporation
United States, Alabama, Huntsville
103 Quality Circle (Show on map)
February 12, 2023
MINIMUM SKILLS & REQUIREMENTS: 3+ years of experience with Assessment & Authorization (A&A) responsibilities, including ISSO, ISSM, policy development, control testing, POA&M management, and Configuration Management Experience in working with DoD tools, including Enterprise Mission Assurance Support Service (eMASS), SCAP, DISA STIGs and other monitoring tools Experience in developing Risk Analysis Reports with security/systems engineers & Program Managers to identify risks associated with Information Systems Security Experience with performing cybersecurity hygiene (compliance standards), including NIST Controls and DISA STIGS Experience with Systems Administration, Information Systems Auditing, Data Security Analysis and/or Network Administration Secret clearance (ability to get TS) DoD 8570 IAT Level II (CISM, CISSP, Security + Certifications) DESIRED SKILLS & REQUIREMENTS: Minimum of 4+ Years Microsoft operating systems administration experience Minimum of 4+ Years Red Hat Enterprise Linux 8 for Development experience Minimum of 2 years' experience as ISSM and/or 4 years' experience as ISSO Experience with Microsoft Office, Visio, Project Four-year degree in Computer Engineering, Computer Science, or Information Systems Security/Assurance Operating System, including Linux and Windows Certifications Excellent written and verbal communication skills College Level Certification(s) in Information Technology field Industrial Security Program experience SRC IS A CONTRACTOR FOR THE U.S. GOVERNMENT, THIS POSITION WILL REQUIRE U.S. CITIZENSHIP AS WELL AS, A U.S. GOVERNMENT SECURITY CLEARANCE AT THE TOP SECRET LEVEL ABOUT US Scientific Research Corporation is an advanced information technology and engineering company that provides innovative products and services to government and private industry, as well as independent institutions. At the core of our capabilities is a seasoned team of highly skilled engineers and scientists with multidisciplinary backgrounds. This team is challenged daily to provide cutting edge technology solutions to our clients. Scientific Research Corporation offers a competitive salary, an extensive benefits package and a work environment that encourages excellence. For positions requiring a security clearance, selected applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information. DIVERSITY & INCLUSION We strongly believe in the abundance of differences among individuals. We value different points of view and appreciate diverse perspectives. We truly believe this is what makes our organization inclusive and more responsive to the needs of our diverse customers. EQUAL OPPORTUNITY EMPLOYER Scientific Research Corporation is an equal opportunity and affirmative action employer that does not discriminate in employment. All qualified applicants will receive consideration for employment without regard to their race, color, religion, sex, age, sexual orientation, gender identity, or national origin, disability or protected veteran status. Scientific Research Corporation endeavors to make accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact for assistance. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. Covid 19 SRC does not currently require COVID-19 vaccinations for its employees. Pending the outcome of various court proceedings and resultant government action, SRC and all other Federal Contractor employees may be required, at some point in the future, to be fully vaccinated subject to accommodations for valid medical or religious reasons. Please visit to read more about the Federal Government's current position on COVID-19 vaccines for Federal Contractor employees. [#CJ #LI-DH1] PRIMARY DUTIES & RESPONSIBILITIES: Oversee the Assessment & Authorization (A&A) of current and proposed Information Systems (IS) in accordance with Risk Management Framework (RMF) process, working directly with Defense Counter-Intelligence & Security Agency (DCSA) Authorizing Official (AO) to develop the required strategy and deliverables to accomplish organization missions. Work independently and provide recommendations to the Information Owners (IOs), Program Managers (PMs) and Facility Security Officer (FSO) by applying RMF expertise and associated actions supporting the development of DCSA accredited IS. Coordinate with the Project PM and other SRC ISSMs to develop project requirements and plans to ensure project success. Manage and report DCSA required RMF efforts to DCSA Information Systems Security Professional (ISSP) and Security Control Assessor (SCA). Work collaboratively with Information Technology (IT) Engineers and System Administrators to conduct Cyber Security (CS) Risk Analysis Report (RAR) to develop mitigation, remediation and monitoring strategies in compliance with National Industrial Security Program Operating Manual (NISPOM, 32 CFR, Part 117) and DCSA Assessment and Authorization Process Manual (DAAPM). Perform all activities associated with obtaining and maintaining RMF Authorities to Operate (ATO) for systems within the organization's area of responsibility, spanning multiple Programs and residing in multiple secure locations. Develop and maintain a Continuous Monitoring (ConMon) Plan to maintain system accreditation compliance. Assist the Director of Security and FSO in the effective implementation, assessment, and management of the SRC Security Program. Conduct periodic self-inspections of the facility's IS Program and "other" accredited systems as part of the overall facility self-inspection program to ensure compliance with Federal laws, regulations, and Organizational policies and procedures.