ISSM FedRAMP and DoW Security

ISSM FedRAMP and DoW Security Skills

• provide due care and diligence in all matters of federal information security compliance
• Lead Governance Risk and Compliance (GRC) staff in compliance with the current federal information security regulatory landscape
• Coordinate internal auditing and continuous monitoring activities
• Review and approve documentation including compliance reports to ensure accuracy and compliance with laws and regulations
• Ensure timely disclosure of information security incidents and vulnerabilities
• Oversee supply chain risk management strategy and investigation efforts ensuring that vendors and subcontractors meet security requirements and standards
• Provide direction and leadership for a small team of five FTE staff members
• Provide general oversight of security initiatives and facilitate communication and collaboration across different teams and departments
• Chair the Change Control Board Internal Security Council which meets weekly and makes decisions regarding significant changes to the information system
• Delegate security-related engagements with customers and vendors to appropriate security team members according to skillset
• Actively communicate with customer security teams to assist them in reaching their compliance goals w appropriate and in accordance with the corporate Customer Responsibility Matrix
• Inform senior leadership of relevant changes within the federal information security legal and regulatory landscape
• Ensure the timely completion of third-party security audits to ensure the continued accreditation of the information system
• Develop corporate security awareness outreach initiatives
• Work closely with other IT teams to integrate security practices into the development and maintenance of applications
• Provide guidance and support to departments across the organization to help mitigate security risks and ensure safe IT practices

•

SummaryISSM FedRAMP and DoW SecurityIntroduction:

The Information System Security Manager (ISSM) is responsible for providing strategic direction, staff management, and advocating on behalf of the security program to ensure compliance with all applied security frameworks, laws, and regulations. This role leads the PowerTrain information security department and directly reports to the Vice President of Cyber Operations.

Responsibilities:

• Provide due care and diligence in all matters of federal information security compliance
• Lead Governance Risk and Compliance (GRC) staff in compliance with current federal information security regulatory landscape
• Coordinate internal auditing and continuous monitoring activities
• Review and approve documentation including compliance reports for accuracy and regulatory compliance
• Ensure timely disclosure of information security incidents and vulnerabilities
• Oversee supply chain risk management strategy and investigation efforts
• Provide direction and leadership for a small team of five FTE staff members
• Provide general oversight of security initiatives and facilitate communication across different teams
• Chair the Change Control Board Internal Security Council
• Delegate security-related engagements with customers and vendors
• Actively communicate with customer security teams
• Inform senior leadership of relevant changes in federal information security regulations
• Ensure timely completion of third-party security audits
• Develop corporate security awareness outreach initiatives
• Work closely with other IT teams to integrate security practices
• Provide guidance and support to departments across the organization

Requirements:

Required Skills:

• Experience in federal information security compliance
• Strong leadership and management skills
• Ability to oversee supply chain risk management
• Excellent communication and collaboration abilities

Preferred Skills:

• Knowledge of Governance Risk and Compliance (GRC) frameworks
• Experience with coordinating internal auditing activities
• Previous experience in incident response management
• Understanding of security awareness initiativesEmployers have access to artificial intelligence language tools ("AI") that help generate and enhance job descriptions and AI may have been used to create this description.

The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.