JOB DESCRIPTION: The Cybersecurity Lead will function as the primary technical representative for issues affecting the cybersecurity of the CE systems/applications and shall work directly with the Government Program and Project managers responsible for these systems to ensure compliance with all policies under RMF and FISMA. Our ideal candidate will have demonstrated technical leadership skills described below and successfully guide our team in solution deliveries that are high-quality, possess minimal defects, and provide consistent communication with our customers. This position will interface daily with stakeholders at various levels within the government and strong communication skills are a must.
NOTE: Position is remote but must be located within 50 miles of San Antonio,TX
ROLES AND RESPONSIBILITIES:
Ensure compliance with all security principles and policies under the RMF and FISMA
Function as the primary cybersecurity representative for issues affecting the security of the CE FMO systems/applications and ensuring AFCEC systems are assessed, comprehensively tested, and authorized to connect to the network.
Prepare Authorization and Assessment (A&A) packages for Government review and validation.
Perform risk analysis, testing, and assessments when modifications and/or changes occur to applications/systems.
Ensure authorization packages meet mandatory requirements for approval by the Authorizing Official (AO).
Identify and analyze threats and vulnerabilities to information systems to maintain the appropriate level of protection.
Review and provide appropriate approval for all hardware, software, and firmware products that provide security features and/or IA enabling capabilities prior to use on any assessed or authorized information system operating on the network.
Hold overall responsibility for data quality in ITIPS in support of the AF CIO portfolio management process and quarterly updates to DoD IAW FISMA.
Execute computer security plans and enforce mandatory access control techniques to prevent unauthorized persons from using network facilities or resources.
Limit access to privileged systems, utilities, and security-relevant programs/data files to authorized personnel only.
Identify the requirements that are security critical and identify and establish corresponding controls for these requirements, including documenting bi-directional traceability between controls and requirements.
Help document and track RMF activities and events on the program Integrated Master Schedule (IMS).
Maintain and update the following documents to meet AF requirements:
o System Security Plan (SSP) o Business Impact Analysis (BIA) o Continuous Monitoring Plan (CMP)
o Mission Risk Assessment Briefing (MRAB) o Ports, Protocols and Services (PPS) Matri
QUALIFICATIONS AND EDUCATION REQUIREMENTS:
Must be a US Citizen. Must hold an Active Secret Clearance.
Bachelor's degree in Information Technology, or other related fields.
10+ years of experience as an ISSO/M or experience in a similar (i.e., size, scope, and complexity) technical area.
5+ years of experience with managing teams in an environment similar (i.e., size, scope, and complexity) to the TO.
5+ years of management and practical experience in conducting Certification and Accreditation (RMF A&A) in a DoD environment.
Must have one or more of the following for Information Assurance Manager (IAM) Level II Certification: o Certified Authorization Professional (CAP), CompTIA Advanced Security Practitioner (CASP) CE, CISM, Certified Information Security Manager (CISSP) or Associate, or GIAC Security Leadership (GSLC)
Powered by ApplicantStack Applicant Tracking Software