Security Program Manager

Job Type: Full-Time
Location: San Diego, CA
Clearance Type: Secret

AERMOR is seeking a Security Program Manager. You will be responsible for managing comprehensive security programs to ensure compliance with federal and Navy-specific security regulations and standards. This role involves oversight of multiple security initiatives, risk management, and the implementation of Enterprise Mission Assurance Support Service (eMASS) processes, ensuring that all cybersecurity policies and protocols are adhered to.

Responsibilities:

• Lead and manage security programs in alignment with Navy and Department of Defense (DoD) policies.
• Ensure compliance with the Risk Management Framework (RMF) for all security-related operations.
• Oversee the entire security program lifecycle, including planning, implementation, and monitoring.
• Utilize Enterprise Mission Assurance Support Service (eMASS) for system authorization and management.
• Ensure all security controls and systems meet the requirements of RMF Step 5, working closely with Fully Qualified Navy Validators (FQNV) during the validation process.
• Track and manage system vulnerabilities, ensuring remediation measures are implemented.
• Perform risk assessments and develop strategies for addressing potential security threats to systems and data.
• Develop Program Protection Plans (PPP) and facilitate the implementation of critical system security features.
• Compile and prepare necessary documentation for system authorizations and briefings for various stakeholders, including senior Navy officials.
• Manage system-related security documentation, ensuring policies are updated and maintained in accordance with Navy requirements.
• Lead integrated product teams (IPTs), technical interchange meetings (TIMs), and local change control boards (LCCB) to ensure cybersecurity compliance across all systems.
• Collaborate with engineering and government teams to ensure proper implementation of security measures in systems under development or sustainment.

Qualifications:

• Minimum of 5 years of specialized experience in Security Program Management, including direct experience with eMASS and cybersecurity risk management frameworks.
• Graduate degree from an accredited university, or relevant military certifications such as CNSSI 4012, 4013, 4014, 4015, 4016, or NDU CIO certificate AQD GA8.
• Must hold one of the following Information Assurance Management (IAM) Level III certifications: CISM, CISSP, GSLC, or CCISO.

Specialized Knowledge:

• Deep understanding of Navy Information Assurance policies, particularly RMF.
• Proficient in managing cybersecurity compliance for large-scale government systems, including familiarity with tools such as Vulnerability Remediation Asset Manager (VRAM) and Configuration Management Professional (CMPro).

Powered by JazzHR

ygL5RhPDPM