Metrica Jobs (NOW HIRING)

Company: Metrica Inc.

We're Hiring!

Information Technology and System Security Manager

Location: San Antonio, TX

Type: Full-Time | Hybrid Schedule

Are you an experienced IT professional with a passion for security and leadership? Metrica Inc. is seeking a dedicated and detail-driven IT & System Security Manager to join our team! You’ll lead IT operations, manage cybersecurity compliance (NIST, RMF), and guide a talented team while making a real impact on our mission-driven work.

This position is responsible for planning, assigning, and directing work; documenting and gaining approval for all IT support procedures and system documentation; assisting employees with addressing service or escalation issues, and applying independent decision making to resolve problems or escalate problems to senior management. The Information Technology and System Security Manager ensures that service levels are met, identifies trends and makes recommendations for service improvements, and provides budgetary recommendations to management for service growth and/or improvement. The Information Technology and System Security Manager serves as the principal advisor on all matters involving the security of an information system. The Information Technology and System Security Manager is responsible for ensuring the confidentiality, integrity, and availability of organizational information systems in accordance with federal regulations, directives, and policies, specifically those outlined by NIST (National Institute of Standards and Technology).

Responsibilities Include:

• Supervise staff and external vendor daily activities ensuring timely and professional delivery of technical support for calls on network problems, computers, core software products, and related hardware peripherals.

• Plan, organize, and direct the work of regular full-time support staff and external vendors; schedule shift coverage; evaluate and document performance; and review staff work for accuracy and timely completion of assigned duties.

• Document, track, and report on software and hardware malfunctions; enter detailed description of user’s problems in an assigned database; and prioritize requests and label according to established procedures.

• Train staff on areas of responsibility, new technology, and support procedures.

• Ensure that IT is providing consistent, high-quality, and professional service, including communication and telephone skills.

• Proactively identify process improvement opportunities, including end-user training tools and documentation.

• Serve as the primary Information System Security Manager for assigned information systems, in accordance with NIST guidelines and organizational policies.

• Develop, implement, and manage security policies, standards, and procedures to maintain accreditation and authorization of systems as prescribed in NIST SP 800-37 Risk Management Framework (RMF).

• Document and manage security controls as set forth in NIST SP 800-53 and other applicable guidelines.

• Conduct system security risk assessments and recommend mitigation strategies.

• Prepare and submit all documentation required for system authorization, security testing, and continuous monitoring, including System Security Plans (SSP), risk assessment reports, and Plan of Action and Milestones (POA&M).

• Coordinate and oversee security control assessments and manage remediation of vulnerabilities.

• Ensure compliance with organizational, federal, and contractual cybersecurity requirements.

• Serve as the point of contact for all security-related matters for assigned systems, including interfacing with system owners, IT staff, auditors, and regulatory authorities.

• Conduct training and promote a security-aware culture among system users and administrators.

• Monitor and analyze system events and incidents, report security violations, and conduct incident response activities as appropriate.

• Maintain current and thorough knowledge of NIST standards, federal cybersecurity regulations, emerging threats, and industry best practices.

• Participate in the Continuous Monitoring (ConMon) strategy for assigned systems.

• Maintain up-to-date system documentation and configuration baselines.

Qualifications:

• Bachelor’s degree in Computer Science, Information Security, or a related technical discipline.

• 10 years of progressive experience in information security roles, with direct responsibility for system security management.

• Professional certifications such as CISSP, CISM, or Security+ preferred.

• Experience with the assessment and authorization (A&A) process for federal information systems.

Required Skills:

• Must be a US Citizen.

• Bachelor’s degree in information systems, Computer Science, or related field.

• Minimum of 10 years IT experience.

• Must have a strong IT background, be knowledgeable of information technology infrastructure products, and possess a thorough understanding of current technologies and how they relate to the business.

• Excellent communication skills and ability with multiple stakeholders in a very dynamic and rapidly evolving environment.

• Strong interpersonal skills to build partnerships with stakeholders and peers.

• Detail-oriented combined with strong organizational skills and an aptitude for analytical thinking.

• Demonstrated ability to work well independently and as a part of a team.

• Demonstrated ability to communicate data processing procedures and requirements to users.

• Determine appropriate action within clearly defined guidelines and escalation procedures.

• In-depth knowledge of NIST RMF (SP 800-37), NIST SP 800-53, FISMA, and other applicable federal requirements.

• Ability to make decisions about scheduling, coverage to maximize efficiency and productivity.

• Ability to obtain and maintain a [Secret/Top Secret] security clearance, if required. Desired Skills:

• Professional certifications such as CISSP, CISM, or Security+ preferred.

• Minimum of four (4) years of supervisory-related experience with direct reports.

• Experience making decisions in a fast-paced, dynamic work environment.

• Experience with enterprise IT Service Management platforms.

• Experience with enterprise information technology support, such as remote control, imaging and remote application deployment and patch management.

• Experience supporting M365/Azure, specifically Azure Active Directory, Admin Console, Exchange Online, SharePoint Online, Teams Admin / Voice, Defender 365, and Purview.

• Experience supporting Windows Server 2K16/2K19 and Windows 10/11.

• Experience supporting the Office 365 suite, especially Teams and OneDrive.

• Experience with Mobile Device Management software such as Jamf-Professional and MEM/Intune.

• Experience with Google Workspace.

• Ability to maintain confidentiality.

• Ability to manage multiple projects and tasks.

• One or more of the following are desired qualifications: A+, Network+, Security+, Azure Fundamentals (exam AZ-900), Azure Administrator (exam AZ-104), or ITIL.

Metrica is an Equal Opportunity Employer, M/F/D/V.

Job Type: Full-time

What We Offer:

Hybrid work schedule

Medical, Dental, Vision

Tuition Assistance

401(k) Retirement Plan

Work with a mission-driven, innovative organization

Apply today and be part of something meaningful

#SanAntonioJobs #ITManager #CybersecurityJobs #NIST #RMF #InformationSecurity #NowHiring #TechJobs #LeadershipOpportunity #MetricaCareers #JoinOurTeam