Modern Technology Solutions, Inc

, at Tinker AFB, OK.. Modern Technology Solutions, Inc. (MTSI) is a 100% employee-owned engineering services and solutions company that provides high-demand technical expertise in Digital Transformation, Modeling and Simulation, Rapid Capability Development, Test and Evaluation, Artificial Intelligence, Autonomy, Cybersecurity and Mission Assurance.. Founded in 1993, MTSI today has employees at over 20 offices and field sites worldwide.. Ensure development and implementation of procedures in accordance with configuration management (CM) policies and practices for authorizing the use of hardware/software on an IS. Any changes or modifications to hardware, software, or firmware of a system must be coordinated with the ISSM/ISSO and appropriate approving authority prior to the change.. Serve as a member of the configuration management board, where one exists (however, the ISSM may elect to delegate this responsibility to the ISSO

information systems security manager

Own Your Future. Modern Technology Solutions, Inc. (MTSI) is seeking a Senior Information Systems Security Manager (ISSM) , at Tinker AFB, OK.
The Senior Information Systems Security Manager(ISSM) You will ensure implementation of DoD, USAF and MAJCOM policies and develop local processess and procedures for the effective execution of the WAFB information Systems Security Support function.
Why is MTSI known as a Great Place to Work?
Interesting Work: Our co-workers support some of the most important and critical programs to our national defense and security.
Values: Our first core value is that employees come first. We challenge our co-workers to provide the highest level of support and service, and reward them with some of the best benefits in the industry.
100% Employee Ownership: we have a stake in each other's success, and the success of our customers. It's also nice to know what's going on across the company; we have company wide town-hall meetings three times a year.
Great Benefits - Most Full-Time Staff Are Eligible for:
Starting PTO accrual of 20 days PTO/year + 10 holidays/year
Flexible schedules
6% 401k match with immediate vesting
Semi-annual bonus eligibility (July and December)
Company funded Employee Stock Ownership Plan (ESOP) - a separate qualified retirement account
Up to $10,000 in annual tuition reimbursement
Other company funded benefits, like life and disability insurance
Optional zero deductible Blue Cross/Blue Shield health insurance plan
Track Record of Success: We have grown every year since our founding in 1993
Modern Technology Solutions, Inc. (MTSI) is a 100% employee-owned engineering services and solutions company that provides high-demand technical expertise in Digital Transformation, Modeling and Simulation, Rapid Capability Development, Test and Evaluation, Artificial Intelligence, Autonomy, Cybersecurity and Mission Assurance.
MTSI delivers capabilities to solve problems of global importance. Founded in 1993, MTSI today has employees at over 20 offices and field sites worldwide.
For more information about MTSI, please visit www.mtsi-va.com.
Responsibilities:
• The ISSM shall work independently on tasks and exercise judgment in the execution of the following tasks:
• Telework is minimal, and at the discretion of the supervisor
• Sustain and update the formal IS security program as needed with the Government ISSM.
• Implement and enforce IS security policies.
• Review and endorse all IS assessment and authorization support documentation packages.
• Advise, provide guidance, and assist the IT/IA team to ensure compliance with established IS policies and procedures.
• Review weekly bulletins and advisories that impact security of site information systems to include AFCERT, ACERT, NAVCIRT, IAVA, and DISA ASSIST bulletins.
• Ensure that periodic testing (monthly for PL-5 systems) is conducted to evaluate the security posture of the ISs by employing various intrusion/attack detection and monitoring tools (shared responsibility with ISSOs).
• Ensure that all ISSOs receive the necessary technical (e.g., operating system, networking, security management, SysAdmin) and security training (e.g., ND-225 or equivalent) to carry out their duties.
• Advise ISSOs concerning the levels of concern for confidentiality, integrity, and availability of the data, and the protection levels for confidentiality for the system.
• Ensure the development of system assessment and authorization documentation by reviewing and endorsing such documentation and recommending action to the DAO/SCA.
• Ensure approved procedures are in place for clearing, purging, declassifying, and releasing system memory, media, and output.
• Maintain, as required by the DAO/SCA, a repository for all system assessment and authorization documentation and modifications.
• Coordinate IS security inspections, tests, and reviews.
• Investigate and report (to the DAO/SCA and local management) security violations and incidents, as appropriate.
• Ensure proper protection and corrective measures have been taken when an IS incident or vulnerability has been discovered.
• Ensure data ownership and responsibilities are established for each IS, to include accountability, access and special handling requirements.
• Ensure development and implementation of an effective IS security education, training, and awareness program.
• Ensure development and implementation of procedures in accordance with configuration management (CM) policies and practices for authorizing the use of hardware/software on an IS. Any changes or modifications to hardware, software, or firmware of a system must be coordinated with the ISSM/ISSO and appropriate approving authority prior to the change.
• Develop procedures for responding to security incidents, and for investigating and reporting (to the DAO/SCA and to local management) security violations and incidents, as appropriate.
• Serve as a member of the configuration management board, where one exists (however, the ISSM may elect to delegate this responsibility to the ISSO.).
• Have a working knowledge of system functions, security policies, technical security safeguards, and operational security measures.
• Access only that data, control information, software, hardware, and firmware for which they are authorized access and have a need-to-know, and assume only those roles and privileges for which they are authorized.
Qualifications:
• The senior candidate shall have 10 years’ experience in the related field.
• The candidate shall have the appropriate DoD 8570 Information Assurance Management certification level, including Security+ Level 2, CISSP certification, and 3-5 years of classified information systems experience (at a minimum journeyman skill level) to develop and implement DoD
security controls.
• Must have senior level industry experience demonstrating and practicing their knowledge, skills, and abilities in Information Systems Security.
• Risk Framework Management and Framework (RMF) certification packages experience.
• Must Possess an active Top Secret security clearance, current within five (5) years, based upon a T5 or T5R.
investigation (formerly known as Single Scope Background Investigation (SSBI) or SSBI Periodic Review (SBPR)).
• Must have 12 months or more of experience in a SAP environment within the last five (5) years.
• Must be eligible for Sensitive Compartmented Information (SCI) and Special Access Programs (SAP) access.
Education Requirement: • Bachelors degree preferred from an accredited university in Information Assurance, Information Security Systems or related fields.
Please Note: U.S. Citizenship is required.
#LI-DB1 #J-18808-Ljbffr

START NEW SEARCH