Information Security Manager

- Collaborate with government clients to create and uphold a robust cybersecurity program along with necessary policies and documentation - Coordinate with government sponsors and ISSMs to execute security authorization reviews and assurance case development for program installations - Utilize relevant guidance from applicable directives and publications - Maintain compliance with security policies, procedures, and guidance - Develop and implement a continuous monitoring strategy - Review audit reports, report anomalies to leadership, and ensure audit tools align with requirements - Adhere to the cyber incident response plan during security events - Liaise with government stakeholders to manage security incidents and ensure vulnerability compliance - Maintain up-to-date knowledge of system functions, security policies, and operational security measures - Actively contribute to the development and revision of security artifacts and assess security impacts of system changes - Define data ownership responsibilities and enforce compliance with system requirements - Supervise security configurations for systems, hardware, software, and firmware - Assist system administrators with approved maintenance activities - Direct security inspections, testing, and reviews while informing leadership of timelines and impacts - Schedule regular testing to assess security posture of systems - Document all security-related vulnerabilities and escalate serious issues for resolution to leadership - Oversee the operation and management of program components - Provide guidance regarding the handling of program data before purging and release - Ensure effective system backup and recovery procedures are in place to restore security features - Appoint and assign responsibilities to ISSOs under supervision, ensuring proper training - Develop and implement comprehensive security education, training, and awareness programs - Confirm that users possess required security clearances and are aware of their responsibilities prior to accessing systems - Take on ISSO responsibilities when needed - Conduct regular security self-inspections to sustain strong security posture - Supervise system security audits