Information System Security Officer - ISSO (Manager Information Security)

Overview

IDEMIA Public Security, a division of IDEMIA Group, is the leading provider of secure and trusted biometric-based solutions, transforming public and private organizations across the globe. Our industry-enabled and client-specific solutions draw upon decades of expertise in biometrics to revolutionize the fields of public security, justice and public safety, travel and transport, identity, and access control. Built on privacy and trust, our market-leading iris, fingerprint and facial recognition solutions top independent benchmarking for accuracy, fairness and scalability. These exacting standards enable our clients to build safer, fairer societies where people can live, interact, and move about freely. With 4000+ employees around the world and 150+ partners worldwide, we offer more than just a job - we provide a dynamic environment where innovation thrives, opportunities abound, and your talents are valued. Be part of a global leader shaping the future of biometric based technology. Learn more here.

Responsibilities

Responsibilities include, but are not limited to:

• Collaborate with government organizations, engineering teams, technical and program offices to resolve technical cybersecurity issues and risks.
• Review cybersecurity test plans, test reports, and validation documentation to ensure system functionality and compliance with applicable security requirements.
• Develop and maintain technical documentation, including system architectures, network diagrams, interface specifications, and engineering analyses.
• Participate in engineering design reviews, technical interchange meetings, audits, and program milestone reviews.
• Develop cybersecurity requirements and engineering solutions in accordance with applicable FISMA High and National Institute of Standards and Technology (NIST) cybersecurity policies and standards.
• Provide technical leadership for implementation of the Risk Management Framework (RMF) throughout the system lifecycle.
• Validate implementation of cybersecurity requirements for devices, subsystems, systems, enclaves, and platform-level architectures.
• Recommend system hardening strategies that improve cyber resilience, mission assurance, and operational survivability.
• Contribute to the establishment and optimization of defensible security processes where existing policy is absent
• Support government efforts in securing trust boundaries and interconnection agreements with external systems

The US base salary range for this position is $134,560.00 - $168,199.00 + bonus + benefits. While it is uncommon for candidates to be hired at or near the top of the pay range, all compensation decisions are made based on the specific facts and circumstances of each hire. The final offer may vary depending on a combination of factors, including a candidate’s skills, qualifications, experience, and geographic location.

Qualifications

Required Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Network Security, Information Technology, Electrical Engineering, Mathematics (with a concentration in Computer Science), or a related technical discipline.
• Minimum of 15 years of professional experience in cybersecurity engineering, systems engineering, software development, computer architecture, or network security.
• Experience supporting Department of Homeland Security, FISMA High requirements .
• Demonstrated experience in cybersecurity engineering, cyber defense, systems integration, and technical leadership.
• U.S. citizenship required
• Must meet background check requirements equivalent to position of public trust

The ideal candidate will have experience with one or more of the following:

• Certified Information Systems Security Professional (CISSP) certification.
• Certified Information Security Manager (CISM) certification.
• National Institute of Standards and Technology (NIST) Cybersecurity Framework.
• Department of Defense 8500-series cybersecurity policies.
• Cybersecurity Test and Evaluation (T&E).
• Cyber Threat Intelligence.

Note to third-party recruiters: IDEMIA Public Security does not work with third-party recruiters absent a signed agreement and will treat any resumes submitted without a signed agreement as the property of IDEMIA Public Security. In the event that IDEMIA Public Security hires a candidate who was brought to our attention by a recruiter who does not have a signed agreement, IDEMIA Public Security will not pay any fees to the recruiter as a result of the hire.