Information System Security Manager

The Information System Security Manager (ISSM) is responsible for ensuring systems and applications comply with National, DoD, and Department of the Air Force cybersecurity requirements. This role leads Risk Management Framework (RMF) activities, assesses security risks and vulnerabilities, evaluates the security impact of system changes, and ensures the confidentiality, integrity, and availability of information systems throughout the system lifecycle. The ISSM works closely with technical teams and leadership to maintain authorization, support continuous monitoring, and uphold system cybersecurity posture.

10 years of experience performing ISSM or senior ISSO functions supporting DoD or Air Force systems Bachelor’s degree or equivalent experience Strong hands-on experience with Risk Management Framework (RMF) and A&A activities Experience conducting security risk, vulnerability, and security impact assessments Experience maintaining RMF artifacts (SSP, POA&Ms, SARs, control documentation) Ability to assess and document security impacts of system changes and configuration updates Experience supporting continuous monitoring, audits, and compliance reviews Strong written and verbal communication skills for technical documentation and leadership briefings Knowledge of cybersecurity policies, NIST publications, and cryptographic fundamentals Certification: CISSP, CISM, or CGRC (DoDI 8140-approved, Basic or Intermediate)

Nice to Have Skills & Experience: Experience supporting cyber inspections, penetration tests, or external assessments Experience with Air Force cybersecurity tools and systems (e.g., eMASS, ACAS, STIGs) Experience participating in CCBs, working groups, and system design reviews Experience supporting mission-critical or classified environments (e.g., NC3 or weapons systems) Prior experience serving as a cybersecurity subject-matter expert to program leadership