Information Systems Security Manager

Leidos Corporate Information Security Office (CISO), reporting through the Digital Sector, is seeking an Information Systems Security Manager to work in our Concord, MA office. The ISSM is responsible for the management and technical administration of  SIPRNET (Secret Internet Protocol Router Network) secure communication infrastructure within the organization. In this role, you will serve as the Subject Matter Expert (SME) within the Information Assurance technical domain and, more specifically, for organizational SIPRNET (Secret Internet Protocol Router Network) enclaves across the enterprise. You will oversee day-to-day information system security operations, resolve complex problems, and develop innovative solutions to meet changing security requirements. To be successful, you must have the ability to work independently as well as with a team of analysts, information technology management and staff, and site management. The ideal candidate will be adaptable to diverse office situations, procedures, and demands.

This role may include a combination of duties to protect information and maintain security controls for an entire system, site, or program in order to reduce risk. Oversee and manage SIPRNet services across multiple sites and advise senior site leadership of established security policies and guidelines. Coordinate and participate in security audits and assessments to ensure that site SIPRNET infrastructure meets the required security standards and complies with regulations. Lead sites in establishing and sustaining the cybersecurity of SIPRNet enclave connections. Coordinate SIPRNet connections for sites per guidance outlined in the Defense Information System Network Connection Process Guide. Ensure SIPRNet systems are configured and sustained per the DoD, U.S. Cyber Command, and JFHQ-DODIN guidance. Provide training and awareness on security protocols, best practices, and Command Cyber Readiness Inspection preparation for organizational and site leadership. Conduct site CCRI self-assessments for all SIPRNet sites within the organization. Develops and leads Information Security projects from conceptualization to full deployment and user acceptance. Create comprehensive training programs focused on information assurance, data security, cybersecurity best practices, and relevant policies and procedures. Design training materials, including manuals, operating procedures, presentations, assign online courses, and other resources. Coordinate technical training on security tools, software, and technologies used within the organization to enhance the skills of IT staff and other relevant personnel. Develop and lead training on how to respond to security incidents, including reporting procedures, containment, eradication, recovery, and post-incident analysis. Develop and maintain a comprehensive onboarding plan for new hires, outlining the orientation process, training schedules, and integration into the team and company culture. Develop and implement a robust tracking system to monitor the progress and completion of IA staff training programs, ensuring accurate and timely recording of training milestones, assessments, and certifications. Implement and manage the Risk Management Framework (RMF) Continuous Monitoring process by utilizing an automated ticketing system, ensuring accurate tracking, monitoring, and reporting of security controls, vulnerabilities, and remediation efforts within the organization's information systems. Manages staff to deliver Cyber Operations, Cyber process improvements, and Cyber project execution. Continuous monitoring, analysis, and response to Information System network and security events. Documents compliance activities in accordance with the governing authority-approved authorization package. Develop procedures and documentation to ensure compliance with Configuration Management (CM) for security-relevant Information System (IS) software, hardware, and firmware.