SOSi is seeking an Information Assurance Manager in Rock Island, Illinois to be responsible for applying information systems security principles, practices, and procedures under the Risk Management Framework to maintain compliance with DoD security regulations.  The ideal candidate will be a strong advocate for integrating security into operations and the implementation of security controls in all stages of the program.

• Create and maintain information security related documentation.
• Implement, maintain, and monitor security controls.
• Achieve and maintain Authorization to Operate information systems.
• Maintain operational security posture for information systems.
• Provide security related training and guidance to program staff.
• Provide supervision and guidance to less experienced members of the Information Awareness team.
• Conduct regular audits to ensure systems are operated security.
• Researches, evaluates, tests, communicates, and implements new security software or devices.
• Responds to queries and requests for computer security information and reports.
• Provide supervision and guidance to less experienced members of the Information Awareness team.

• In scope active Secret security clearance required.
• High School Diploma.
• 10+ years of relevant experience.
• 6+ years of experience in Information Assurance, Cybersecurity, or related field.
• IAM-II certification (CAP, CASP, CISM, CISSP, GSLC, CCISO).
• At least one computing environment certification.
• Ability to perform risk assessment and risk management for information systems.
• Experience with NIST RMF process and experience drafting RMF documentation.
• Experience implementing and monitoring technical, administrative, and operational security controls.
• Experience with overseeing successful ATO packages.

• Experience with the operational and technical skills below:
  • Security Technical Implementation Guides (STIGs)
  • Information Assurance Vulnerability Alerts (IAVAs)
  • Security Content Automation Protocol (SCAP)
  • Cloud Security concepts
  • MS Windows Server - Group Policy Objects
  • MS Windows Server - Active Directory
  • MS Windows Server - System Administration
  • Host Based Security System (HBSS)
  • Elastic Endgame
  • Reviewing MS Windows security event logs
  • Use of scanning tools and interpreting results
• Fluency in a foreign language desired but not required.

• Normal office conditions with possible requirement to lift and/or move objects or packages of up to 25 lbs.