> Markdown version of [/jobs/ext/2558226-information-system-security-manager-issm-daffm](https://www.wearedevelopers.com/jobs/ext/2558226-information-system-security-manager-issm-daffm). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information System Security Manager (ISSM) - DAFFM

- **Company:** UNITECH CONSULTING, L.L.C.
- **Location:** Ellsworth Air Force Base, SD, United States
- **Contract:** Temporary contract
- **Skills:** Configuration Management, Cyber Security, Databases, Information Security Management, Cyberark, Information Technology, Plan of Action and Milestones
- **Published:** August 2, 2026
- **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/17790243?backUrl=%2Fcareer%2F17790243%2FInformation-System-Security-Manager-Issm-Daffm-South-Dakota-Ellsworth-Air-Force-Base

## About the Role

Candidate must hold a relevant higher-education degree (Master's or Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, or Information Technology) AND demonstrate clear, hands-on professional experience authoring Risk Management Framework (RMF) artifacts (SSPs, RARs, POA&Ms)and utilizing government compliance repositories (eMass / ITIPS).

## Description

* Advise the FM AO, AODR, program offices, and system stakeholders on compliant application of federal, DoD, and Air Force cybersecurity policy.
 * Interpret policy and translate it into actionable implementation guidance.
 * Oversee full-lifecycle RMF activities across multiple systems.
 * Review security-control selection, implementation, validation, and continuous-monitoring status.
 * Oversee currency and quality of SSPs, RARs, POA&Ms, assessment records, and related authorization artifacts in eMASS and ITIPS.
 * Review enterprise vulnerability trends, overdue remediation, risk exposure, and corrective-action status.
 * Provide risk-informed recommendations supporting ATO, ATO with Conditions, or Denial decisions.
 * Facilitate resolution of security issues among system owners, program offices, security personnel, and the FM AO.
 * Participate in governance forums and brief FM leadership.
 * Review high-risk or overdue POA&M escalations and recommend leadership action.
 * Support FM-level cybersecurity policies, SOPs, templates, checklists, and annual program reviews.
 * Coordinate cybersecurity activities with infrastructure, database, application, CyberArk, and configuration-management personnel.

Requirements:

 * Enterprise or portfolio-level RMF governance involving multiple systems.
 * Direct support to an Authorizing Official, AODR, Chief Information Officer, Chief Information Security Officer, or comparable authorization authority.
 * eMASS and ITIPS experience. Record both separately; do not treat familiarity with one as proof of the other.
 * Review or approval of authorization packages and risk recommendations.
 * Development or governance of SSPs, RARs, POA&Ms, control-assessment findings, and continuous-monitoring records.
 * Leadership briefings involving authorization status, vulnerability trends, risk acceptance, or overdue remediation.
 * Experience coordinating system owners, program managers, assessors, technical teams, and cybersecurity personnel., * Message type: Informational; you will receive text messages regarding your application and potentially regarding interview scheduling.
 * No mobile information will be shared with third parties/affiliates for marketing/promotional purposes.
 * Message frequency will vary depending on the application process.Msg & data rates may apply.
 * OPT out at any time by texting "Stop".


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm)
- [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)