Information Systems Security Manager

This position requires active SECRET security clearance.

Agile Care Enterprises is looking for an Information Systems Security Manager (ISSM) to contribute to specific ISSM support tasks at Vance Air Force Base Medical Group in Enid, OK. This position will be providing primary support in a remote/hybrid capacity with the potential of one day a month on-site and is full-time with 40-hour/per week supporting DHA RMED.

Job Duties & Responsibilities

• Develop and maintain a DHA organizational or system-level cybersecurity
• program related to cybersecurity requirements, objectives policies, processes, and procedures.
• Ensure that information owners and stewards associated with Department of Defense (DoD) information received, processed, stored, displayed, or transmitted on each DoD Information System (IS) or Platform Information Technology (PIT) system are identified to establish accountability, access approvals, and special handling requirements.
• Maintain a repository for all organizational or system-level cybersecurity related documentation.
• Ensure that Information Systems Security Officers (ISSO) are appointed in writing and provide oversight to ensure that they are following established cybersecurity policies and procedures.
• Monitor compliance with cybersecurity policy, as appropriate, and review the results of such monitoring.
• Ensure that cybersecurity inspections, tests, and reviews are synchronized and coordinated with affected parties and organizations.
• Act as the primary cybersecurity technical adviser to the Authorizing Official (AO).
• Report incidents to the AO and all other appropriate reporting chains.
• Work with the Program Management Office (PMO) to ensure that the correct.
• Risk Management Framework (RMF) Process is being followed.
• Maintain documentation of Plans of Action and Milestones (POA&M).
• Develop cybersecurity self-assessment results and evidence with the assistance of necessary vendors during Information Assurance Validation Readiness Review (IAVRR) to help determine if the system security is sufficiently mature to execute the IA certification test event.
• Participate in RMF Team Meetings, as required.
• Develop RMF documentation as required (with the assistance of necessary vendors and stakeholders, if applicable) to ensure the information is current, accurate, and applicable to the article of test.
• Utilize Enterprise Mission Assurance Support Services (eMASS) for the documentation of test evidence and risk assessment for each system.

Qualifications

• Must be a U.S. Citizen
• Current active Secret Level Security Clearance
• Strong analytical and problem-solving skills
• DoD 8570 Certification is a plus.
• CompTIA Security
• CISSP, CISM, or similar certification
• BA/BS and 5 years of experience or an additional 4 years of experience may be considered in lieu of a degree.

Experience

• Ten years of hands-on experience with Information Technology to include three of the following areas: Systems Requirements, project management and strategic planning, HIPAA requirements, Medical Systems, DoD Medical, Operational Requirements, Enterprise Strategic Planning, Unix/Linux system software, Test & Evaluation, and Training.
• Recognized expert who has demonstrated industry and public service leadership. in one or more of: medical systems; advanced system architecture; cybersecurity; hardware technologies; digital/analog communications technologies; applied physics; human factors engineering; computer simulation; electronic sensor technologies; and ERP.

Knowledge

• Knowledge of data backup and recovery.
• Knowledge of Plan of Action and Milestones (POA&M)
• Demonstrated comprehensive knowledge DOD military specifications and standards.
• Knowledge of business continuity and disaster recovery continuity of operations plans.
• Ability to plan and organize work and interact with technical and non-technical personnel translating user requirements into responsive applications.
• Demonstrated detailed knowledge of IA concepts and requirements.
• System design integration planning for multiple large-scale installations.
• Hardware and software Evaluation
• System Test and Evaluation, planning execution and/or management.
• System requirements planning and oversight.
• Knowledge of intrusion detection methodologies and techniques for detecting host and network-based intrusions.
• Knowledge of controls related to the use, processing, storage, and transmission of data.
• Knowledge of encryption algorithms.
• Knowledge of the organization's enterprise information technology (IT) goals and objectives.
• Knowledge of risk management and incident response
• Understanding of FISMA and HIPAA IA requirements.
• Services Oriented Architecture design and development.
• Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).
• Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.
• Knowledge of new and emerging information technology (IT) and cybersecurity technologies.
• Knowledge of vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins).

Education & Training

• Bachelor's degree or 15 years of experience in lieu of degree
• Certified Information Systems Auditor
• CEH certification is a plus
• Technical Training in cybersecurity, Information Technology, Medical Systems, Network Design, Strategic Planning, and/or HIPAA law.
• Possesses certification in order to meet compliance with 8570 categories of CND Auditor, CND Analyst, CNDSP Manager, CND Incident Responder, CND Infrastructure Support, IASAE I or IASAE II.

Agile Care offers a comprehensive benefits package, including medical, dental, vision, 401K, wellness program, paid time off (PTO), and paid holidays.

All positions at Agile Care Enterprises are subject to background investigations. Employment is contingent upon successful completion of a background investigation including criminal history and identity verification.

Pay range for this position is used as a guideline only and is not a guarantee of compensation. Additional factors will be considered including, but not limited to, level of skills, knowledge, and experience.

All your information will be kept confidential according to EEO guidelines.

Agile Care is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, sexual orientation, gender identity, or any other characteristic protected by law.

PLEASE BE ADVISED THAT WE DO NOT ACCEPT SOLICITATIONS FROM STAFFING AGENCIES