IAVM Compliance Manager

Job Description

OverviewThe IAVM Compliance Manager will supervise Cybersecurity Vulnerability Analysts with responsibilities of acting as escalation points for all IAVM related incidents. Will act as the main point of contact between the customer and the team for any reporting and recommendation of system improvements. Team building, call management, escalation management, and excellent customer service skills are mandatory Seeks to protect and defend information and information systems by ensuring confidentiality, integrity with non-repudiation, authentication, and availability. Program: OMDAC - SWACAResponsibilities

• Utilize Tenable Security Center and NESSUS Scanning tools to automate compliance assessment and reporting.
• Operate, maintain, and troubleshoot Linux backend and server infrastructure for the RCC-SWA AOR.
• Develop IAVM plans, policies and procedures in conjunction with the ISSM for each theater of operation; liaison with ISSM on all IAVM issues.
• Draft plans and policies to ensure that subordinate elements and customers submit reports using the specified tools and methodologies.
• Ensure that all theater IAVA reporting requirements to higher headquarters are delivered in a timely manner.
• Generate and update reports for all areas of responsibility, interact with System Center Configuration Manager (SCCM) administrators in order to leverage scanning and patching battle rhythm.
• Continuously monitor network and systems assets to ensure accurate reporting for Risk Management Framework (RMF).
• Evaluate and prepare inspections, to include Cybersecurity Service Provider (CSSP), Cyber Command Readiness Inspections (CCRI), and Pre-Inspection Assessment (PIA)

Qualifications

• Education / Certifications:
• One year of related academic study above the high school level may be substituted for one year of experience up to a maximum of a 4-year bachelors degree in a Software Engineering or Business Information Systems discipline for three years general experience.
• Active Secret Clearance.
• U.S. citizenship is required.
• This position requires candidates to adhere to DoD 8570.01-M.
• All candidates are required to maintain at least one (1) baseline certification and one (2) computing environment (CE) certification. The authorized certifications for this job title are listed as follows:
• IAT Level: IAT III
• Baseline:
  • Cisco CCNP Security
  • CompTIA CASP ce
  • GIAC GCED
  • GIAC GCIH
  • ISACA CISA
  • ISC2 CISSP (or Associate)
• CE:
• Required:
  • DISA ACAS (current release) DISA: ACAS - Assured Compliance Assessment Solution 5.3 (or current version)
• One Required:
  • Microsoft: MCSA - Cloud Platform
  • Microsoft: MCSA - Certified Solutions Associate Windows Server 2012
  • Microsoft: MCSA - Certified Solutions Associate Windows Server 2016
  • Microsoft: MCSE - Cloud Platform and Infrastructure
  • Microsoft: MCSE - Data Management and Analytics
  • Microsoft: MCSE - Productivity Solutions Expert
• Experience:
  • At least five years of practical experience working with various data (network and system) technologies, with a minimum of two of those years focused on security.
  • Knowledge of certification testing tools.
  • Experience with a customer service-oriented company
  • Understanding of DoD facility security requirements.
  • Knowledge of DISA Security Technical Implementation Guides (STIG).
  • Experience in DoD 8570 and 8530 requirements.
• Skills & Technology Used:
  • Ability to troubleshoot servers and infrastructure equipment in support of compliance requirements
  • Ability to assess networking requirements and provide solutions
  • Ability to make accurate and independent decisions under pressure
  • Excellent organizational, interpersonal, written, and verbal communication skills
  • Ability to perform comfortably in a fast-paced, deadline-oriented work environment
  • Ability to successfully execute many complex tasks simultaneously

We are committed to an inclusive and diverse workplace that values and supports the contributions of each individual. This commitment along with our common Vision and Values of Integrity, Respect, and Responsibility, allows us to leverage differences, encourage innovation and expand our success in the global marketplace. Vectrus is an Equal Opportunity /Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, protected veteran status or status as an individual with a disability. EOE/Minority/Female/Disabled/Veteran.

• Education / Certifications:
• One year of related academic study above the high school level may be substituted for one year of experience up to a maximum of a 4-year bachelors degree in a Software Engineering or Business Information Systems discipline for three years general experience.
• Active Secret Clearance.
• U.S. citizenship is required.
• This position requires candidates to adhere to DoD 8570.01-M.
• All candidates are required to maintain at least one (1) baseline certification and one (2) computing environment (CE) certification. The authorized certifications for this job title are listed as follows:
• IAT Level: IAT III
• Baseline:
  • Cisco CCNP Security
  • CompTIA CASP ce
  • GIAC GCED
  • GIAC GCIH
  • ISACA CISA
  • ISC2 CISSP (or Associate)
• CE:
• Required:
  • DISA ACAS (current release) DISA: ACAS - Assured Compliance Assessment Solution 5.3 (or current version)
• One Required:
  • Microsoft: MCSA - Cloud Platform
  • Microsoft: MCSA - Certified Solutions Associate Windows Server 2012
  • Microsoft: MCSA - Certified Solutions Associate Windows Server 2016
  • Microsoft: MCSE - Cloud Platform and Infrastructure
  • Microsoft: MCSE - Data Management and Analytics
  • Microsoft: MCSE - Productivity Solutions Expert
• Experience:
  • At least five years of practical experience working with various data (network and system) technologies, with a minimum of two of those years focused on security.
  • Knowledge of certification testing tools.
  • Experience with a customer service-oriented company
  • Understanding of DoD facility security requirements.
  • Knowledge of DISA Security Technical Implementation Guides (STIG).
  • Experience in DoD 8570 and 8530 requirements.
• Skills & Technology Used:
  • Ability to troubleshoot servers and infrastructure equipment in support of compliance requirements
  • Ability to assess networking requirements and provide solutions
  • Ability to make accurate and independent decisions under pressure
  • Excellent organizational, interpersonal, written, and verbal communication skills
  • Ability to perform comfortably in a fast-paced, deadline-oriented work environment
  • Ability to successfully execute many complex tasks simultaneously

We are committed to an inclusive and diverse workplace that values and supports the contributions of each individual. This commitment along with our common Vision and Values of Integrity, Respect, and Responsibility, allows us to leverage differences, encourage innovation and expand our success in the global marketplace. Vectrus is an Equal Opportunity /Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, protected veteran status or status as an individual with a disability. EOE/Minority/Female/Disabled/Veteran.

• Utilize Tenable Security Center and NESSUS Scanning tools to automate compliance assessment and reporting.
• Operate, maintain, and troubleshoot Linux backend and server infrastructure for the RCC-SWA AOR.
• Develop IAVM plans, policies and procedures in conjunction with the ISSM for each theater of operation; liaison with ISSM on all IAVM issues.
• Draft plans and policies to ensure that subordinate elements and customers submit reports using the specified tools and methodologies.
• Ensure that all theater IAVA reporting requirements to higher headquarters are delivered in a timely manner.
• Generate and update reports for all areas of responsibility, interact with System Center Configuration Manager (SCCM) administrators in order to leverage scanning and patching battle rhythm.
• Continuously monitor network and systems assets to ensure accurate reporting for Risk Management Framework (RMF).
• Evaluate and prepare inspections, to include Cybersecurity Service Provider (CSSP), Cyber Command Readiness Inspections (CCRI), and Pre-Inspection Assessment (PIA)

Keyskills :