Information System Security Manager – ISSM

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop comprehensive system security plans.

• Make informed decisions regarding cybersecurity risks.

• Execute audits on NIPR systems.

• Formulate, implement, and uphold data strategies to guarantee quality and accessibility.

• Establish and sustain architectural standards, reference architectures, processes, operating models, and related data management resources.

• Ensure that unclassified systems comply with DoD and government regulations while fulfilling program requirements and maintaining accreditation.

• Oversee the development, maintenance, accreditation, re-accreditation, and monitoring of System Security Plans (SSPs).

• Conduct regular compliance assessments.

• Act as the main point of contact for security inspections, tests, and evaluations by oversight bodies.

• Collaborate with the cybersecurity lead.

• Provide support for cybersecurity initiatives, continuous monitoring, and emerging compliance efforts.

• Perform additional responsibilities as assigned.

⛳️ Requirements

• Valid Active Secret Clearance.

• Bachelor’s degree in Computer Science, Cyber Security, or a related discipline.

• Over 8 years of pertinent cybersecurity experience.

• One current certification: CASP+, CISSP, CISSP Associate, or GSLC.

• At least 3 years of experience working with Air Force Risk Management Framework (RMF) security frameworks, along with DoD and Air Force security policies and directives.

• Proven experience in providing tactical information security guidance and overseeing cybersecurity activities for IT platforms.

• Experience collaborating with a multi-contractor team in support of cybersecurity, continuous monitoring, and emerging compliance needs.

• Background in ensuring compliance with FISMA requirements and tracking them within the Air Force’s Information Technology Investment Portfolio Suite (ITIPS).

• Familiarity with ensuring that software, hardware, and firmware align with applicable IAVMs.

• Experience managing and acting on Plan of Action and Milestones (POA&M) entries as part of the RMF process.

• Proficiency in reviewing and updating Security Technical Implementation Guide (STIG) results.

• Experience ensuring adherence to Continuous Monitoring protocols.

• Working knowledge of Risk Management Framework and NIST 800-53 revisions 4 and 5 controls.

• Experience utilizing eMASS and acquiring an Authority to Operate (ATO).

• Familiarity with security validation testing through a DevSecOps methodology in both on-premises and cloud environments.

• Experience with ACAS, Splunk, audit log analysis, and cybersecurity monitoring functions.

• Ability to identify risks associated with technology solutions and assess their impact on business outcomes.

🏝️ Benefits

• Medical coverage.

• Dental coverage.

• Vision coverage.

• Life coverage.

• Disability coverage.

• Retirement savings plan with company matching.

• Paid time off.

• Optional supplemental benefits.

• Employee assistance program.

• Educational assistance.

• Tuition reimbursement.