Information Systems Security Manager

- Oversee the implementation, documentation, and ongoing monitoring of Risk Management Framework (RMF) controls. - Act as the main point of contact for all matters regarding the systems certification and accreditation (C&A) and Authority to Operate (ATO). - Maintain and update all system security documentation in eMASS, including creating and overseeing Plans of Action & Milestones (POA&M). - Apply and manage DISA STIGs across the system architecture, including Windows Server, Oracle databases, and IIS web servers. - Conduct and document reviews of ACAS and SCAP scans, coordinating all efforts for vulnerability remediation. - Manage enterprise-level system hardening, patching, and configuration baseline management (GPOs, local security policies). - Ensure the secure setup of server hardware and software across a distributed IT environment. - Protect applications and data using Public Key Infrastructure (PKI). - Diagnose network, database, and application connectivity issues impacting performance or security. - Draft and maintain essential security documents, such as System Security Plans (SSPs), Standard Operating Procedures (SOPs), and change requests for the Configuration Control Board (CCB). - Ensure compliance with all DoD patching and IAVM directives. - Perform other duties as assigned related to the position.