Information System Security Manager (ISSM)

Advent Services•JB San Antonio-Fort Same Houston, TX

15h•Onsite

About The Position

Advent Services is hiring an Information System Security Manager to provide cybersecurity support at the TSRL facility at Joint Base San Antonio-Fort Sam Houston in San Antonio, Texas. The normal work schedule is Monday through Friday, 0700 to 1700. The role supports NIPRNet, DREN, RDTE, SIPRNet, and standalone enclaves and systems, and includes ISSM duties associated with DoD 8140 Cyberwarfare Code 722. The ISSM administers and coordinates enterprise cybersecurity and Risk Management Framework (RMF) compliance across the distributed AFRL organization. The role supports authorization to operate (ATO), maintains security documentation and eMASS records, assesses and mitigates system vulnerabilities, and advises senior management and the Authorizing Official on cybersecurity risk and posture. It also supports cybersecurity audits and inspections, configuration management, workforce certification tracking, user access processes, and unit customer service. Additional duties include supporting the AFRL Cybersecurity Working Group, the AFRL Inspector General inspection functional lead, and TSRL enterprise pilot or exploratory IT projects. Pilot project areas may include cybersecurity, virtualization, collaborative systems, research computing, mobile technologies, IT systems management, and cloud services.

Requirements

Bachelor of Science degree in Information Technology or Cybersecurity, demonstrated by a copy of the degree.
At least five years of demonstrated experience working with RMF requirements and providing cybersecurity services, with no more than three consecutive years of lapse in cyberspace work.
Information Technology or Cybersecurity education, training, or certifications required by DoDM 8140.03 and current Government directives, regulations, and policies for the role or labor category.
Current, valid Security+ certification.
Intermediate-level Cybersecurity Work Role experience.

Nice To Haves

Current Secret clearance.

Responsibilities

Provide ISSM cybersecurity support for NIPRNet, DREN, RDTE, SIPRNet, and standalone enclaves and systems.
Validate that administrative and technical personnel meet required baseline certification and training requirements before elevated system access is granted; administer signed Privileged Access Agreements and conduct recurring privileged-account audits.
Serve as a cybersecurity consultant to unit technicians and administer, coordinate, and track compliance with TSRL enterprise cybersecurity architecture, strategy, plans, and supplemental policy across the distributed AFRL organization.
Ensure RMF requirements are met, ATOs are granted and remain valid, security documentation is current, and supported units have access to cybersecurity expertise.
Assist with configuration-management reviews and maintenance, update RMF requirements, and support internal and external audits and inspections.
Enter, monitor, and maintain AFRL data and database structures in ITIPS, AFRL RMF Workflow, and eMASS.
Maintain ATOs for TSRL and related subsystems in accordance with applicable RMF directives and security standards.
Advise senior management and the Authorizing Official on risk levels, security posture, and changes affecting the organization’s cybersecurity posture.
Assess threats and vulnerabilities, develop security risk profiles, and conduct technical risk assessments to identify, document, and mitigate vulnerabilities across systems and enclaves.
Collect and maintain cybersecurity reporting data; maintain the digital eMASS system-package repository; administer and track systems and enclaves in eMASS and keep ATOs current.
Prepare, distribute, and maintain system-security plans, procedures, and other evidence, including Body of Evidence documents, System Security Plans, Security Assessment Reports, POA&Ms, risk assessment reports, topology diagrams, software lists, and hardware lists.
Ensure remediation plans are in place for vulnerabilities found during risk assessments, audits, and inspections; maintain ATO/eMASS artifacts for semi-annual inspection and upload required documentation changes to eMASS within three business days.
Maintain STIG hardening checklists and implement remediation actions for findings from cybersecurity audits and inspections.
Support Government cybersecurity inspections and audits; coordinate eMASS changes with the TSRL IT lead, manage and monitor eMASS security controls and assessment procedures, and safeguard team members’ eMASS data from being overwritten.
Use ACAS or other Air Force-approved scanning software, interpret vulnerability scan results, and conduct application and other technical and non-technical risk and vulnerability assessments.
Implement IAVM dissemination, reporting, and compliance procedures and apply cybersecurity strategy to cloud service and deployment models.
Provide applicable training and ensure TSRL users satisfy cybersecurity training requirements for continued network access.
Execute logical access onboarding and offboarding, maintain SOPs for DD Form 2875 submission and routing, and serve as the central coordinator for organizational accounts.
Schedule and complete quarterly media destruction in accordance with Air Force and local policies.
Attend cybersecurity meetings as required and provide meeting minutes supporting RMF requirements.
Collaborate on system discovery and unit discussions to categorize systems for eMASS, develop compliant cybersecurity solutions, and develop organizational security policies.
Assist with hardware and software entry and exit requirements for TSRL.
Assist in managing TSRL MOAs, MOUs, and AOR letters with external customers for the RMF Accreditation Program; update documents annually and conduct complete reviews every three years.
Courier classified equipment or media to approved destinations throughout TSRL in accordance with security regulations.
Track and report DoW 8140.03 certification requirements for TSRL personnel, participate in related teleconferences and meetings, and work with the Government lead on compliance metrics and briefings.
Support the AFRL Cybersecurity Working Group, including monthly video teleconferences, roll call, note-taking, action tracking, and project facilitation.
Gather requirements and help develop documentation, processes, concepts of operations, implementation standards, and policies for AFRL cybersecurity efforts.
Brief DoW, Joint, Air Force, AFRL, and industry senior leaders on S&T-related IT and cybersecurity efforts and recommendations.
Provide unit customer service by answering cybersecurity questions, explaining processes and policies, and giving guidance and recommendations on cybersecurity configurations and implementation.
Support the Inspection Functional Lead for the Comm functional area in AFRL Inspector General pre- and post-inspection activities.
Support research, selection, implementation, operation, metrics collection, and reporting for TSRL IT pilot or exploratory projects with enterprise applicability and potential capability, efficiency, or cybersecurity improvements.