What are the responsibilities and job description for the ISSM position at RTL Networks?
Job title: ISSM
Location: Arlington, VA
Status - Full-time
About Us: RTL Networks, Inc. is a rapidly-growing company primarily focused on providing information technology (IT) support services and personnel to a variety of commercial and government customers for long term contracts. By providing a wide array of professional services and products, we help our customers leverage technology and operate with total confidence in the predictability, security and reliability of their technology resources in order to meet business objectives.
Job Purpose or Summary:
RTL Networks has as an exciting opportunity as an Information Systems Security Manager (ISSM) Senior on our GSM-O II IDIQ contract’s Joint Service Provider (JSP) Cyber Security Task Order in Alexandria, VA. JSP provides a full range of IT products, services, and solutions and customer services to the Office of the Secretary of Defense (OSD), Chairman of the Joint Chiefs of Staff (CJCS) and the Joint Staff (JS),and others.
Primary Responsibilities
- Senior SME on an ISSM team that coordinates, reviews, validates, and approves all activities, which contribute to the Assessment and Authorization (A&A) of automated information systems.
- Address physical security matters to information assessments, security tests and evaluations, preparation of Contingency Plans, and administration of Life Cycle Management and Configuration Management documentation.
- Assess the vulnerability of Automated Information Systems (AIS).
- Recommend and implement changes to IT systems in accordance with DoD directives.
- Function as a technical specialist and assess the risk management security and contingency planning programs.
- Implement measures to protect data from physical destruction or theft. Ensure that back-up procedures are in place for recovery from loss, destruction of data and program files, or from physical damage.
- Implement SOPs and periodically tests recovery procedures to ensure recovery procedures are operational.
- Develop policy and guidance, and establish implementation and oversight plans to ensure compliance with Risk Management requirements.
- Coordinate the review and evaluation of cyber security programs and effectiveness of implementation; identify problem areas; updates and establishes new requirements in response to new technologies and threats; and make recommendations to achieve a fully compliant IT architecture.
- Develop Systems Security Contingency Plans and Disaster Recovery Procedures.
- Develop and implement training and awareness programs to ensure that systems, network, and data users are aware of, understand, and adhere to systems security policies and procedures.
Required Skills:
- DoD 8570 IAM Level III/ IAT Level III Certification
- BS and 12-15 years of prior experience, add'l experience may be considered in lieu of degree
- Expert knowledge of NIST SP 800-37, CNSSI 1253, FIPS 199 and NIST SP 800-53
- Expert in Risk Management-Experience doing Plan of Actions and Milestones (POA&M) tracking
- Experience creating metrics
- Expert in Risk Management Framework (RMF) accreditation processes
- Expert in creating presentations and presenting policies, guidance, and procedures regularity
- Knowledge of the DoD Risk Assessment Methodology (DRAM)
Applicant selected for this position must be able to obtain and/or maintain a security clearance or access.
U.S. Citizenship required.
Chosen applicants will be required to pass pre-employment drug screening and a criminal background check.
We are an Equal Opportunity Employer.