Information System Security Manager (ISSM III) - Naval Surface Warfare Center

Description

The Naval Surface Warfare Center Philadelphia Division (NSWCPD) is a Department of Defense entity focused on research and development, test and evaluation, engineering, and fleet support for the Navy's ships, submarines, military watercraft, and unmanned vehicles. We are seeking an experienced Information System Security Manager (ISSM III) to lead the development, monitoring, and execution of the Cybersecurity Program in support of NSWCPD Code 104.

**Key Responsibilities:**
- Oversee and manage the implementation of the information security program within the organization, including coordinating with various levels of personnel on cybersecurity initiatives.
- Develop, implement, and enforce cybersecurity policies aligned with the DoD Information Assessment and Authorization (A&A) process and Risk Management Framework (RMF) standards.
- Lead cyber strategy development and manage resources related to personnel, infrastructure, policy enforcement, emergency planning, and security awareness.
- Review A&A artifacts and perform A&A validation as part of cybersecurity operational oversight.
- Cultivate a culture of security awareness through training and emergency planning initiatives.
- Serve as a Subject Matter Expert in cybersecurity lifecycle management, offering guidance on best practices and compliance requirements.
- Coordinate the implementation and sustainment of cybersecurity measures across labs operating under RMF guidelines.

Requirements

**Target Education:**
- Master’s degree in computer science, information technology, or an equivalent science, technology, engineering, and mathematics (STEM) degree from an accredited college or university.

**Target Experience:**
- A minimum of eight (8) years of experience in coordinating and managing information security program implementations within an organization or specific area of responsibility.
- Demonstrated experience managing cyber strategy, personnel, infrastructure, policy enforcement, emergency planning, security awareness, and/or other resources.