Candidates must be current practitioners with applied, real-world experience in information systems security management.
Familiarity should align with one or more of the following areas:
Information security program development and management
Security policy development and implementation
Risk management framework (RMF) implementation
Security control assessment and authorization (A&A)
Continuous monitoring and security posture management
Security awareness and training program management
Incident response planning and coordination
Compliance management (FISMA, NIST, DoD regulations)
Security documentation (SSP, POA&M, SAR)
Stakeholder communication and security briefings
Must have verifiable experience in information systems security management.
Relevant certifications (CISSP, CISM, CAP, etc.) are a plus but not required.

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

information systems security managementinformation security program developmentsecurity policy developmentrisk management framework (RMF)security control assessmentcontinuous monitoringincident response planningcompliance managementsecurity documentationstakeholder communication

Certifications

CISSPCISMCAP