Information System Security Manager – ISSM

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop security plans for systems.

• Make informed decisions regarding cybersecurity risks.

• Perform audits on NIPR systems.

• Create, implement, and sustain data strategies to guarantee quality and accessibility.

• Establish and uphold architectural standards, reference architectures, processes, operating models, and associated data management resources.

• Ensure that unclassified systems comply with DoD and government regulations, fulfilling program requirements while maintaining accreditation.

• Oversee the development, maintenance, accreditation, re-accreditation, and overall management of SSP.

• Conduct regular compliance assessments.

• Act as the primary liaison for security inspections, tests, and reviews conducted by oversight authorities.

• Collaborate with the cybersecurity lead.

• Assist in cybersecurity, ongoing monitoring, and emerging compliance initiatives.

• Perform additional tasks as assigned.

⛳️ Requirements

• Active Secret Clearance required.

• Bachelor’s degree in Computer Science, Cyber Security, or a related discipline.

• At least 8 years of pertinent cybersecurity experience.

• A current certification is mandatory: CASP+, CISSP, CISSP Associate, or GSLC.

• Minimum of 3 years of experience with Air Force RMF security frameworks, including DoD and Air Force security policies and guidelines.

• Proven experience providing tactical information security counsel and managing cybersecurity operations for IT platforms.

• Experience collaborating with a multi-contractor team to support cybersecurity, ongoing monitoring, and evolving compliance standards.

• Experience ensuring compliance with FISMA requirements and tracking them within the Air Force’s Information Technology Investment Portfolio Suite (ITIPS).

• Familiarity with ensuring that software, hardware, and firmware adhere to applicable IAVMs.

• Experience in tracking and addressing POA&M entries as part of the RMF process.

• Ability to review and update STIG results.

• Proven experience in maintaining Continuous Monitoring practices.

• Working knowledge of Risk Management Framework and NIST 800-53 revisions 4 and 5 controls.

• Experience using eMASS and securing an ATO.

• Familiarity with security validation testing through a DevSecOps approach in both on-premises and cloud environments.

• Experience with ACAS, Splunk, audit log reviews, and cybersecurity monitoring operations.

• Skill in identifying technology implementation risks and analyzing their effects on business results.

🏝️ Benefits

• Comprehensive medical coverage.

• Dental coverage.

• Vision coverage.

• Life insurance coverage.

• Disability coverage.

• Retirement savings plan with company matching.

• Paid time off.

• Optional supplemental benefits.

• Employee assistance program.

• Educational assistance.

• Tuition reimbursement.