> Markdown version of [/jobs/ext/4327012-information-systems-security-manager-issm-iii](https://www.wearedevelopers.com/jobs/ext/4327012-information-systems-security-manager-issm-iii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Systems Security Manager (ISSM) III - **Company:** General Dynamics Information Technology - **Location:** Colorado Springs, CO, United States - **Experience:** Experienced - **Salary:** $144,245.0 - $195,155.0 - **Contract:** Permanent contract - **Skills:** Configuration Management, Cyber Security, Information Systems, File Transfer, Firmware, Identity and Access Management, Information Security Management, Microsoft Security Essentials, SAP ERP, Network Administration, SAP (Applications), Information Technology, Data Management, Cisco - **Published:** October 15, 2026 - **Apply:** https://www.techcareers.com/job.asp?id=3472109345&tx=FJ8582FFQ&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54 ## About the Role Information Security,Information Security Management,Information System Security Certifications: GSEC: GIAC Security Essentials Certification - Global Information Assurance Certification (GIAC) - Global Information Assurance Certification (GIAC), Cisco Certified Network Associate (CCNA) Security - Cisco - Cisco, GICSP: Global Industrial Cyber Security Professional - Global Information Assurance Certification (GIAC) Experience: 10 + years of related experience, * 10+ years related experience * 2+ years SAP experience r equired * Prior performance in roles such as ISSO or ISSM Education: * Master's degree or equivalent experience (6 years) Certifications: * IAT Lvl III or IAM Lvl III - within 6 months of the date of hire. Clearance * Current - TS/SCI * Willing to obtain - TS/SCI with CI poly Additional Requirements * Must have expert knowledge of DoD, National and applicable service and agency security policy, manuals and standards * Must be able to regularly lift up to 50 lbs ## Description The ISSM's primary function serves as a principal advisor on all matters, technical and otherwise, involving the security of information systems under their purview. The position will provide "day-to-day" support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities. Performance shall include: * Lead, cultivate and maintain productive working relationships with other DoD agencies managers, data stewards, and senior leadership to foster productive and positive cyber security profile * Participate in the strategic planning and implementation of the Cyber Security Program * Provide expert input to the formulation of cyber security policies based upon the Risk Management Framework (RMF) with emphasize on Joint Special Access Program Implementation Guide (JSIG) authorization process * Advise customer on Risk Management Framework (RMF) assessment and authorization issues * Develop and implement a security assessment plan * Perform risk assessments and make recommendations to DoD agency customers * Advise government program managers on security testing methodologies and processes * Evaluate authorization documentation and provide written recommendations for authorization to government PM's * Develop and maintain a formal Information Systems Security Program * Ensure that all IAOs, network administrators, and other cyber security personnel receive the necessary technical and security training to carry out their duties * Develop, review, endorse, and recommend action by the AO or DAO of system assessment documentation * Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media * Develop and execute security assessment plans that include verification that the features and assurances required for each protection level functioning * Institute and implement a Configuration Control Board (CCB) charter * Maintain a and/or applicable repository for all system authorization documentation and modifications * Develop policies and procedures for responding to security incidents, to include investigating and reporting security violations and incidents * Ensure proper protection or corrective measures have been taken when an incident or vulnerability has been discovered within a system * Ensure that data ownership and responsibilities are established for each authorization boundary, to include accountability, access rights, and special handling requirements * Ensure development and implementation of an information security education, training, and awareness program, to include attending, monitoring, and presenting local cyber security training * Evaluate threats and vulnerabilities to ascertain whether additional safeguards are needed * Assess changes in the system, its environment, and operational needs that could affect the authorization * Ensure that authorization is accomplished a valid Authorization determination has been given for all authorization boundaries under your purview * Review AIS assessment plans * Coordinate with PSO or cognizant security official on approval of external information systems (e.g., guest systems, interconnected system with another organization) * Conduct periodic assessments of the security posture of the authorization boundaries * Ensure configuration management (CM) for security-relevant changes to software, hardware, and firmware and that they are properly documented * Ensure periodic testing is conducted to evaluate the security posture of IS by employing various intrusion/attack detection and monitoring tools (shared responsibility with ISSOs) * Ensure that system recovery and reconstitution processes developed and monitored to ensure that the authorization boundary can be recovered based on its availability level determination * Ensure all authorization documentation is current and accessible to properly authorized individuals * Ensure that system security requirements are addressed during all phases of the system life cycle * Establish and develop a self-inspection program within the organization * Periodically review system security to accommodate changes to policy or technology * Coordinate all technical security issues outside of area of expertise or responsibility with ISSE * Provide expert research and analysis in support of expanding programs and area of responsibility as it pertains to cyber security and information technology activities * Develop Assured File Transfers (AFT) on accordance with the JSIG * Provide leadership, mentoring, and quality assurance for Cyber Security and Information Technology team members