Information Systems Security Manager - Advanced (VA, Springfield)

RiVidium Inc. is seeking an individual to be responsible for the cybersecurity of a program, organization, system, or enclave.

Responsibilites and abilities for this position shall include, but not limited to:

• Acquire and manage the necessary resources, including leadership support, financial resources, and key security personnel, to support information technology (IT) security goals and objectives and reduce overall organizational risk.
• Acquire necessary resources, including financial resources, to conduct an effective enterprise continuity of operations program.
• Advise senior management (e.g., Chief Information Officer [CIO]) on risk levels and security posture.
• Advise senior management (e.g., CIO) on cost/benefit analysis of information security programs, policies, processes, systems, and elements.
• Advise appropriate senior leadership or Authorizing Official of changes affecting the organization's cybersecurity posture.
• Collect and maintain data needed to meet system cybersecurity reporting.
• Communicate the value of information technology (IT) security throughout all levels of the organization stakeholders.
• Collaborate with stakeholders to establish the enterprise continuity of operations program, strategy, and mission assurance.
• Ensure that security improvement actions are evaluated, validated, and implemented as required.
• Ensure that cybersecurity inspections, tests, and reviews are coordinated for the network environment.
• Ensure that cybersecurity requirements are integrated into the continuity planning for that system and/or organization(s).
• Ensure that protection and detection capabilities are acquired or developed using the IS security engineering approach and are consistent with organization-level cybersecurity architecture.
• Establish overall enterprise information security architecture (EISA) with the organization's overall security strategy.
• Evaluate and approve development efforts to ensure that baseline security safeguards are appropriately installed.
• Evaluate cost/benefit, economic, and risk analysis in decision-making process.
• Identify alternative information security strategies to address organizational security objectives.
• Identify information technology (IT) security program implications of new technologies or technology upgrades.
• Interface with external organizations (e.g., public affairs, law enforcement, Command or Component Inspector General) to ensure appropriate and accurate dissemination of incident and other Computer Network Defense information.