Information Systems Security Manager

About This Role

This Information Systems Security Manager role is within the Leidos Corporate Information Security Office (CISO) and focuses on the management and technical administration of SIPRNET (Secret Internet Protocol Router Network) secure communication infrastructure. The successful candidate will serve as a Subject Matter Expert (SME) in Information Assurance, specifically for organizational SIPRNET enclaves across the enterprise, overseeing daily security operations and developing innovative solutions.

Responsibilities

• Oversee and manage SIPRNet services across multiple sites and advise senior site leadership on established security policies and guidelines
• Coordinate and participate in security audits and assessments to ensure site SIPRNET infrastructure meets required security standards and complies with regulations
• Lead sites in establishing and sustaining the cybersecurity of SIPRNet enclave connections
• Coordinate SIPRNet connections for sites per guidance outlined in the Defense Information System Network Connection Process Guide
• Ensure SIPRNet systems are configured and sustained per DoD, U.S. Cyber Command, and JFHQ-DODIN guidance
• Provide training and awareness on security protocols, best practices, and Command Cyber Readiness Inspection preparation for organizational and site leadership
• Conduct site CCRI self-assessments for all SIPRNet sites within the organization
• Develop and lead Information Security projects from conceptualization to full deployment and user acceptance
• Create comprehensive training programs focused on information assurance, data security, cybersecurity best practices, and relevant policies and procedures
• Design training materials, including manuals, operating procedures, presentations, online courses, and other resources
• Coordinate technical training on security tools, software, and technologies used within the organization to enhance the skills of IT staff and other relevant personnel
• Develop and lead training on how to respond to security incidents, including reporting procedures, containment, eradication, recovery, and post-incident analysis
• Develop and maintain a comprehensive onboarding plan for new hires, outlining the orientation process, training schedules, and integration into the team and company culture
• Develop and implement a robust tracking system to monitor the progress and completion of IA staff training programs, ensuring accurate and timely recording of training milestones, assessments, and certifications
• Implement and manage the Risk Management Framework (RMF) Continuous Monitoring process by utilizing an automated ticketing system, ensuring accurate tracking, monitoring, and reporting of security controls, vulnerabilities, and remediation efforts within the organization's information systems