Classified Cyber Sec Asc Mgr - L4

Standard Job Description

Leads those ensuring compliance to governing documents and security policies and assist in regulatory periodic assessments. Implements and tests state-of-the-art secure operating systems, networks, and database solutions. Stays current with system vulnerabilities and provides current security training to all system users. Conducts risk assessments and provides recommendations for secure implementation and compliance in accordance with government regulations and information assurance/cybersecurity guidelines. Creates, maintains and submits information system security documents and reports to regulatory agencies. Assesses and mitigates system security threats/risks throughout the program life cycle; validates system security requirements definition and analysis; establishes system security documentation; assists with the implementation of security procedures; verifies information system security requirements; performs information system certification and accreditation planning, testing, assessing and liaison activities. Familiar with information system security architectural documentation standards. Able to apply information assurance / cyber security standards, directives, guidance and policies to an architectural/risk based framework. Provide architectural / risk based analysis of information assurance / cyber security features and relate existing system to future needs and trends and requirements. For engineers providing security information assurance, use Info Assurance Engineer (E254, L254). For security professionals providing systems security analysis, use Computer Systems Security Analysis (E121, L121).

Basic Qualifications

• Final transferable Secret security clearance. Last Periodic Reinvestigation within the past five years, or enrolled in Continuous Vetting.
• Able to obtain and keep Special Access Program (SAP) access.
• [5+] years of cybersecurity experience, including at least [2] years as an ISSM or ISSO on classified systems.
• Working knowledge of DoDI 8510.01, JSIG, DoDM 5205.07 and the NIST SP 800 series (800-37, 800-53).
• Qualified for DoD 8140 work role 722 (ISSM) at the intermediate / advanced level, for example with CISSP, CISM, CGRC, CASP+ or CCISO.
• Has led technical teams through complex projects, making decisions from independent analysis backed by evidence.
• Excellent communication, facilitation and stakeholder management skills, including explaining technical risk in plain operational language.

Desired Skills

• Experience writing and maintaining authorization artifacts (SSP, SCTM, Security CONOPS, SOPs) through a product's lifecycle and sustainment.
• Experience using and configuring SIEM and compliance tools, such as Splunk, Tenable/ACAS, STIG Viewer and SCAP.
• Experience with trusted download procedures and data spill response.
• Top Secret clearance with SCI eligibility.