Information Systems Security Manager (ISSM) - Journeyman

JBW Federal is a subsidiary company of the Kanaka Foundation - An NHO who's mission is to support Native Hawaiians.

You will receive a comprehensive benefits package that includes:

• Health insurance
• Dental insurance
• Vision insurance
• Pet insurance
• Annual membership to Costco or Sam's
• 401K
• ...and much, much more!

Job Description: JBW Federal is seeking an Information Systems Security Manager to support the 39th Information Operations Squadron (39 IOS) from Hurlburt Field, FL or Joint Base San Antonio, TX.

What You'll Be Doing:

• You will understand cybersecurity concepts and methodologies at the professional level with knowledge equivalent to: Certified Information Systems Security Professional, or similar certifications.
• You will direct, oversee, and manage and perform records management for all Account Forms including, but not limited to: Authorized User Agreements and associated user forms for all networks required for duty at the 39 IOS, System Authorization Access Requests, Privileged User Agreements, 8570/8140 validation, Operating System Certification validation, and associated user forms.
• You will manage and update MICT checklists for assigned programs including, but not limited to: Privileged User, 17-1301 COMPUSEC, and 17-101 RMF.
• You will verify Cybersecurity Awareness training for all students as well as maintaining appointment letters for Program Managers, ISSO, ISSM, ISSE, Systems Administrators, Client Systems Technicians, and Cybersecurity Liaisons.
• You will ensure equipment inspection prior to entry and exit of the facilities and ensure entry and exit logs are accomplished as well as overseeing and performing wireless scanning throughout the facility to ensure no rogue activity.
• You will review, update, and enforce Media Control policy including, but not limited to: Issuing and tracking removable media and ensuring media sanitization along with reviewing equipment purchase requests to ensure items are on approved products listings and meet requirements to enter the facilities.
• You will direct and conduct network audits and review vulnerability scans on all networks used by the 39 IOS as well as responding to any vulnerabilities appropriately while overseeing and performing COMPUSEC and Information Security (INFOSEC) duties.
• You will validate administrator accounts on all networks and respond to any discrepancies appropriately by monitoring, validating, and reporting administrators 8570/8140 certification status.
• You will respond to incidents and oversee response and reporting to include but not limited to: performing random walkthroughs, bag inspections with the Security team and review, update, and enforce contingency plan policy
• You will ensure cybersecurity marking and standards enforcement including but not limited to: Classification stickers and markings on all systems, Bomb threat aids posted by all phones, and Combined Security Cards are posted by all workstations.
• You will answer all TASKORDS/ taskers by MAJCOM for action on unit owned networks including but not limited to: vulnerability remediation and data calls.
• You will oversee the Risk Management Framework (RMF) process for all networks owned and operated by the 39 IOS including, but not limited to: answer data calls, prepare system package, categorize system by guiding documents, select security controls for risk mitigation, implement security controls, assess security control effectiveness, monitor system and update accreditation package, Security Impact Analysis (SIA) submissions for tenants requesting changes and install of new software, and respond to and coordinate requirements for accreditation package not owned by the squadron.
• You will order, issue, manage, and account for all tokens granting access to networks to include auditing and inventorying the issuance of student user tokens.
• You will manage the Cybersecurity Liaison program for the squadron under the direction of the Wing Cybersecurity Office by reviewing, updating, and enforcing the Security Concept of Operations (SECONOPS) policy.

What Required Qualifications You'll Bring:

• Associate's Degree (preferably in a STEM field) or Approved Equivalent Experience.
• 2 years of risk management framework experience within the last 5 years
• IAT/M Level III certification
• Ability to travel CONUS and OCONUS Occasionally. Must have a current passport or able to acquire within the first 60 days of employment
• Clearance - Top Secret/SCI

Kanaka Family of Companies is an Equal Opportunity Employer, and all qualified candidates will receive consideration for employment without regard to race, color, religion, national origin, marital status, sex (including pregnancy), gender identity or expression, age, disability, veteran status, sexual orientation, genetic information (family medical history), or any other status protected by federal, state or local laws. EEO/AA employer/Vet/Disabled.