Information Systems Security Manager (ISSM), CG-2210-14

Implements and manages information security protections for third-party systems in accordance with appropriate federal regulations, FDIC standards, and commensurate with the risk and magnitude of the impact resulting from unauthorized access, use, disclosure, disruption, modification, or destruction of the information. Guides system owners and their representatives, IT project teams and third-party service providers to ensure that FDIC Risk Management Framework (RMF) requirements are met. Develops and maintains the security categorization of third-party systems, and advise FDIC system owners, project teams and third-party system service providers on execution of system security activities, such as developing and maintaining system security plans and related documentation, completing security assessments, documenting and implementing any agency responsibilities, and remediation of security and privacy control weaknesses and Plan of Actions & Milestones (POA&Ms). Provides technical advic