Information Security Director jobs in Philadelphia, PA

• Conducting risk and vulnerability assessments of information systems to identify vulnerabilities, risks, and protection needs.
• Developing, updating, and/or reviewing system RMF documentation to include Security Plans, Implementation Plans, Plans of Action and Milestones (POA&Ms), and Risk Assessment Reports (RARs).
• Providing solutions to complex problems that require the regular use of expertise and creativity. Problems are broadly defined, and solutions require the continuation of specialized theories and knowledge.
• Assessing system compliance against NIST, DoD, and Navy security requirements to include the NIST 800-53 controls and DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
• Coordinating with other system SMEs to identify and develop authorization boundary diagrams, architecture diagrams, and hardware and software inventories.
• Perform annual security reviews, annual testing of security controls and annual testing of the contingency plan in line with FISMA requirements.
• Working with system administrators, engineers, and developers to update system/site policies, procedures, and process guides.
• Producing evidence as necessary to support compliance status of NIST, DoD, and Navy security requirements.
• Maintaining awareness and knowledge of evolving security and risk management standards and communicate and apply relevant changes to existing processes.
• Attending and participating in regular A&A status meetings to facilitate progress and address potential issues of RMF system efforts.
• Actively participating in working group meetings to identify, plan, and execute strategies in response to emerging cybersecurity/RMF policies.
• Utilize the Enterprise Mission Assurance Support Service (eMASS) system workflow for all formal coordination during the RMF process.
• Report changes in the security posture of systems to the Authorizing Official.

• Associate Degree from accredited University or CNSSI 4012 certificate or ADQ GA7 or successful completion of at least one of the following military training courses: NEC 2779
  (CIN: A-531-0009) or 3372 or CIN W-3B-1500 (EKMS Manager) or A-4C-1340 (KMI) (or DoD Service equivalent)
• Active secret or above security clearance.
• IAM Level 1 Certification (CAP, CND, Cloud , GSLC, Security CE, HCISPP).

• Working knowledge of the Naval Sea System Command, Naval Surface Warfare Center, and Fleet organizations is desired.

• Attending mandatory, annual training sessions
• Providing regular status reports to management summarizing progress, challenges, metrics, and recommendations
• Collaborating with team members to ensure effective communication and coordination
• Attending recurring team meetings or huddles
• Assisting in the development of new initiatives

mrILFPGUjF