Information Assurance (IA) Manager with Security Clearance

GCyber is hiring an Information Assurance Manager to support a high

• profile Air Force network program.

The Information Assurance Manager runs the vulnerability management program, processes USCYBERCOM and Air Force cyber orders, and maintains the artifacts that support the network's Authority to Operate (ATO).

This position is contingent upon contract award.

• Manage the Information Assurance Vulnerability Management (IAVM) program across three operational sites and a systems integration lab.
• Receive and process USCYBERCOM and Air Force cyber orders, including TASKORDs, OPORDs, CTOs, TCNOs, MTOs, Cyber NOTAMs, and SPINs; determine what applies to the network and track mitigation to completion.
• Run weekly vulnerability scans with ACAS, track remediation, and provide the recurring security compliance report to the Government ISSM and engineers.
• Maintain compliance reporting in DISA VMS and CMRS and in the Air Force AFNETOPS Compliance Tracker.
• Develop and maintain RMF artifacts in eMASS with the Government ISSM, SCAR, and Security Control Assessor to obtain and maintain the network's Authority to Operate.
• Manage the IT investment record in ITIPS in accordance with Air Force policy.
• Perform first responder scans, network defense incident reporting, and post-notification investigation.
• Advise the Program Manager, Government engineers, COR, ISSM, and ISSO on RMF and cybersecurity compliance.

• Active DoD SECRET clearance
• ISC2 Certified Information Systems Security Professional (CISSP)
• DoD 8140/8570 IAM Level II certification.
• BA/BS and 7+ years of DoD information assurance or cybersecurity compliance experience.

• Hands-on ACAS (Tenable/Nessus) scanning, analysis, and remediation tracking.
• Experience developing eMASS artifacts and maintaining an ATO package.
• Experience processing DoD cyber orders and reporting compliance through VMS, CMRS, or ACT.

• Experience taking a system through a full ATO reauthorization.
• Experience managing an ITIPS record under DAFI 17-100.
• Familiarity with Air Force cybersecurity service providers, including AFNOC/NOD, 26 NOG Det 2, and AFCERT.
• Experience automating STIG compliance and vulnerability reporting.