Information security manager serp_jobs.h1.location_city

Job Summary

The Information Security Manager is responsible for developing, implementing, and maintaining the organization's information security program aligned to FISMA and the NIST Cyber Security Framework to ensure the confidentiality, integrity, and availability of our information and information system assets. This includes the development of policies, procedures and processes, creation of Security Authorization packages, and oversight of monthly Continuous Monitoring reports which include vulnerability scanning, interviews and system testing. The Information Security Manager supports security engineering architecture reviews of CSBS information systems ensuring they are designed and built around their respective protection needs with proven security architectures, and that required protection mechanisms are addressed and implemented early and maintained throughout the life cycle of information systems to minimize risk to CSBS. The Information Security Manager is expected to work with a variety of stakeholders, including system owners, implementation engineers, third-party auditors, and the CSBS Information Security Department to develop deliverables, recommend security solutions, and maintain the existing Authority to Operate (ATO) status for CSBS systems and implement new ATOs for other emerging systems and platforms.

Essential Functions

To perform this job successfully, an individual must be able to perform each essential duty and responsibility satisfactorily. Reasonable accommodations may be made to enable an individual with disabilities to perform the essential functions. Other duties may be assigned to meet business needs.

This position will perform hands-on tasks to monitor and manage the security posture of CSBS's information technology services. In this role, the Information Security Manager will be responsible for participating in and leading the analysis and evaluation of information technology services design, engineering practices, and architecture.

Security Program Management

• Work with the CISO to develop a security program and security projects that address identified risks and business security requirements.
• Manage the process of gathering, analyzing and assessing the current and future threat landscape, as well as providing the CISO with a realistic overview of risks and threats in the enterprise environment.
• Partner with the CISO to develop budget projections based on short and long-term goals and objectives.
• Monitor and report on compliance with security policies, as well as the enforcement of policies within the IT department.
• Propose changes to existing policies and procedures to ensure operating efficiency and regulatory compliance.
• Work as a liaison with vendors and the legal and purchasing departments to establish mutually acceptable contracts and service-level agreements.
• Manage production issues and incidents and participate in problem and change management forums.
• Work with the CISO, IT and business stakeholders to define metrics and reporting strategies that effectively communicate successes and progress of the security program.
• Provide support and guidance for legal and regulatory compliance efforts, including audit support.
• Develop and implement controls and configurations aligned with security policies and legal, regulatory, and audit requirements.
• Work with the CISO to develop a security program and security projects that address identified risks and business security requirements.
• Advise senior leadership on risk mitigation strategies based on established risk tolerance and industry best practices.
• Align organizational requirements with security risk management goals, ensuring a cohesive approach to risk mitigation.
• Develop, review, and monitor compliance with organizational security policies.

Security Engineering Architecture Reviews

CSF and RMF ATO Support

Additional Responsibilities :

Minimum Qualifications

To perform this job successfully, an individual should possess the knowledge, skills, and abilities listed and meet the amount of education, training and / or work experience required.

Education and Experience

Knowledge, Skills and Abilities

Requirements

Values Instilled Behaviors for Excellence (VIBE)

At CSBS, work-life balance isn't just a policy; it's our VIBE! We recognize that our team members have lives that deserve attention and care. That's why we create strong, supportive relationships that help everyone grow both professionally and personally. We honor each other's expertise and speak the truth, even when it's a bit awkward. And guess what? This honesty creates a vibe of respect and trust that powers our efficiency and our excellence. It lets us chase those career goals while also nurturing our personal pursuits. At CSBS, you can thrive at work and at home-it's the best of both worlds!

Just like a healthy work-life, collaboration is an essential part of CSBS's mission. In fact, it is the heartbeat of everything we do! We're all about pitching in, giving props to our colleagues, and having each other's backs. This allows us to push ourselves to our maximum potential and embrace those bold risks and innovative solutions. No matter what comes our way, our commitment to communication and teamwork strengthens us. We at CSBS are on mission and on the move, tackling all challenges together!

Leadership Competency Model

At CSBS, we believe in leadership at every level, empowering all employees, regardless of role, to take initiative, inspire others, and drive progress. Our five core competencies are Leading Change and Transformation, Leading Others, Results Focused, Business Intelligence, and Collaborative Partnering to provide a framework for professional growth while ensuring accountability in our performance.

Leading Change and Transformation means embracing innovation and adaptability to drive continuous improvement. Leading Others is about guiding, mentoring, and influencing colleagues to move our mission forward. A Results-Focused mindset ensures we meet our goals with efficiency and impact. Business Intelligence allows employees to make informed, strategic decisions based on data and industry insights. Finally, Collaborative Partnering fosters teamwork and strong relationships to achieve shared success.

This competency model not only supports individual growth and development but also strengthens CSBS as we evolve into a more agile and innovative organization. Here, leadership isn't just a title, it's a mindset that moves us forward together.

Working Conditions

This job description should not be construed to imply that these requirements are the only standards for the position. Incumbents will follow any other instructions and perform any other related duties as may be required. CSBS has the right to revise this job description at any time. CSBS is an "at will" employer and as such, neither this job description nor your signature constitutes any form of contractual arrangement between you and CSBS.

Compensation at CSBS

At CSBS, salary offers are determined within the established range based on a candidate's experience, education, and the market demand for the role. Where appropriate, we also carefully benchmark against similar internal positions to ensure equity and consistency.

In addition to competitive salaries, CSBS offers a comprehensive benefits package, a flexible hybrid work environment, and an inclusive culture. Learn more about our benefits, culture, and work environment by visiting CSBS Careers .