Standard Job Description

As the Information System Security Manager (ISSM) for RMS Moorestown, you will lead by example in advancing the RMS Classified Cyber Security mission – “Keep our customers ahead of ready by effectively and efficiently managing security risk to information systems; enabling mission execution, meeting customer requirements, and delivering 21st Century security that supports deterrence, growth and continuous improvement.” The incumbent will report to the Moorestown Site Manager, Classified Cyber Security within the Rotary and Mission Systems (RMS) business area.

In this role you must embody the foundation of Leadership and Technical Excellence, hold yourself and your peers accountable to our four strategic priorities of Operational Enablement, Risk Reduction, Workforce Development, and Cost-Conscious compliance.

• Provide guidance and mentorship to Alternate ISSMs and Information System Security Officers (ISSOs) executing on tactical milestones, ensuring success for portfolio programs and the Classified Cyber Security organization.
• Serve as the ISSM of record for the Moorestown Cage Code to ensure compliance with government and company security requirements.
• Embody the Classified Cyber Security (CCS) Program function and share the CCS vision with the Program Management leadership team to execute the strategic goals of the assigned portfolio.
• Assist leadership with the recruitment, development, and retention of local classified cyber security talent essential for maintaining secure operations.
• Develop relationships with multiple government and customer security agencies to ensure compliance with Department of Defense Information operating environments (e.g., NISPOM, etc.).
• Participate in planning and implementation of current and future security domains including those which may introduce new service areas (e.g. OneLM Networks, Cloud Computing, AI/ML).

Ensure compliance to governing documents and security policies and assist in regulatory periodic assessments. Implements and tests state-of-the-art secure operating systems, networks, and database solutions. Stays current with system vulnerabilities and provides current security training to all system users. Conducts risk assessments and provides recommendations for secure implementation and compliance in accordance with government regulations and information assurance/cybersecurity guidelines. Creates, maintains and submits information system security documents and reports to regulatory agencies. Assesses and mitigates system security threats/risks throughout the program life cycle; validates system security requirements definition and analysis; establishes system security documentation; assists with the implementation of security procedures; verifies information system security requirements; performs information system certification and accreditation planning, testing, assessing and liaison activities. Familiar with information system security architectural documentation standards. Able to apply information assurance / cyber security standards, directives, guidance and policies to an architectural/risk based framework. Provide architectural / risk based analysis of information assurance / cyber security features and relate existing system to future needs and trends and requirements. For engineers providing security information assurance, use Info Assurance Engineer (E254, L254). For security professionals providing systems security analysis, use Computer Systems Security Analysis (E121, L121).

Basic Qualifications

Must possess a DoD 8140/8570 IAM/IAT or IASAE Level III certification (e.g., CISSP, CCSP, CISSP-ISSAP, or CISSP-ISSEP)

Previous experience working with system accreditation requirements and NIST 800‑53 (DAAG/JSIG) RMF implementation 

Hands on experience with industry standard Information Assurance tools 

Experience with developing, reviewing and maintaining RMF artifacts

Experience interfacing directly with internal stakeholders (e.g. Program Management Office) and external stakeholders (e.g. DCSA ISSP)

Desired Skills

In-depth experience in migrating ISOLANs to Cloud Computing Environments (e.g. C3E, etc.)

In-depth experience in system hardening, analysis, and vulnerability management 

Experience implementing and documenting security requirements for complex technologies within large environments, possessing strong technical skills 

Experience setting up or using Tenable Nessus / Security Center and Splunk

Experience implementing or validating Secure Technical Implementation Guidance (STIGs)