Information Systems Security Manager

Job Description:

SAIC is seeking a highly skilled Information Systems Security Manager (ISSM) to lead cybersecurity initiatives and manage the security lifecycle of classified systems. This role involves implementing security controls, ensuring compliance with regulations, and acting as the primary cybersecurity advisor to program management and stakeholders.

Primary Duties and Responsibilities:

1. Cybersecurity Program Leadership:

   • Serve as the main cybersecurity advisor to program management and the Information System Owner.
   • Integrate cybersecurity measures into all phases of the Information System lifecycle.
   • Oversee the development and maintenance of system security programs and policies.

2. Policy Compliance and Documentation:

   • Maintain up-to-date and accessible cybersecurity-related documentation.
   • Certify compliance with NISPOM, NIST SP 800-53, and DAAPM standards.
   • Develop and implement system security training and awareness programs.

3. Risk Management and Security Controls:

   • Perform risk assessments and maintain current documentation throughout the system's lifecycle.
   • Coordinate the implementation of security controls with stakeholders.
   • Ensure continuous monitoring and adherence to Authorization to Operate (ATO) standards.

4. Incident Reporting and Auditing:

   • Collect and analyze audit records as per the security plan.
   • Report configuration changes or cybersecurity events impacting IS authorization or security posture.

5. Stakeholder Collaboration:

   • Communicate with SAIC management and Government agencies regarding compliance and support needs.

Qualifications:

Required Education and Experience:

• Education and Clearance:

  • Bachelor’s Degree and at least 10 years of experience in information systems security.
  • Active DoD Secret clearance.
  • U.S. Citizenship required.

• Professional Expertise:

  • Minimum of 5 years working with classified IS operations.
  • In-depth understanding of the Risk Management Framework (RMF) and eMASS.
  • Proficiency with Microsoft Windows operating systems and hybrid cloud platforms such as AWS, Azure, Nutanix, or VMware.

• Certifications:

  • Current DoD 8570 IAM Level 1 certification required (e.g., CAP, GSLC, Security+ CE).

Desired Qualifications:

• Extensive experience with DCSA and DAAPM guidelines.
• Advanced certifications such as CISSP, CISM, CASP, or CEH.
• Cloud certification (e.g., AWS Certified Solutions Architect, Azure Administrator).
• Familiarity with Linux operating systems and advanced Windows Server capabilities.

Target Salary Range:

$160,001 - $200,000 (based on experience and qualifications).

Additional Information:

• Application Process:
  Applications are accepted on a rolling basis with no set deadline.

• COVID-19 Policy:
  SAIC does not mandate COVID-19 vaccinations or boosters. Compliance with customer site-specific requirements is expected.