Information System Security Manager (ISSM)

Diné Development Corporation•Wright-Patterson AFB, OH

About The Position

Dine Source is seeking an Information System Security Manager to support an Air Force program. The role focuses on cybersecurity for NIPR systems, including developing system security plans, making cyber risk decisions, and conducting audits. The position is contingent upon contract award. The ISSM ensures unclassified systems comply with DoD and government regulations while meeting program requirements and remaining in an accredited state. The role leads system security plan development and maintenance, accreditation and reaccreditation, and oversight. It also coordinates with the cybersecurity lead and serves as a primary contact for security inspections, tests, and reviews by oversight authorities. The role additionally involves data strategy and architecture documentation, cybersecurity advice and activity management, continuous monitoring, compliance tracking, risk assessment, and security validation across on-premises and cloud environments.

Requirements

Active Secret clearance.
Bachelor of Science in Computer Science, Cyber Security, or a related field.
8+ years of relevant cybersecurity experience.
One current certification: CASP+, CISSP, CISSP Associate, or GSLC.
3+ years working with Air Force RMF security frameworks, including DoD and Air Force security policies and instructions.
Experience and ability to provide tactical information security advice and manage cybersecurity-related activities for current or future IT platforms.
Ability to work with a multi-contractor team in support of cybersecurity, continuous monitoring, and emerging compliance requirements.
Experience ensuring FISMA requirements are met and tracking them in Air Force ITIPS.
Experience ensuring software, hardware, and firmware comply with applicable IAVMs.
Experience tracking and actioning POA&M entries as part of the RMF process.
Experience reviewing and updating STIG results.
Working experience with the Risk Management Framework and NIST 800-53 Revision 4 and Revision 5 controls.
Experience working within eMASS and obtaining an ATO.
Familiarity with security validation testing through a DevSecOps process in on-premises and cloud environments.
Experience with ACAS, Splunk, audit-log review, and other cybersecurity monitoring functions.
Ability to identify risks associated with technology solutions and analyze their impact on desired business outcomes.

Responsibilities

Develop, implement, and maintain data strategies to ensure quality and accessibility.
Develop and maintain definitions and documentation for architectural standards, reference architectures, processes, operating models, and logical and physical data and associated data management resources.
Ensure unclassified systems follow DoD and government regulations while meeting program demands and operating in an accredited state.
Lead system security plan development, maintenance, accreditation and reaccreditation, and oversight, including periodic compliance reviews.
Work with the cybersecurity lead and serve as a primary contact for information system security inspections, tests, and reviews by oversight authorities.
Provide tactical information security advice and manage cybersecurity-related activities for current or future IT platforms.
Work with a multi-contractor team on cybersecurity, continuous monitoring, and emerging compliance requirements.
Ensure FISMA requirements are met and track them in the Air Force Information Technology Investment Portfolio Suite (ITIPS).
Ensure software, hardware, and firmware comply with applicable IAVMs.
Track and take action on POA&M entries as part of the RMF process.
Review and update STIG results.
Ensure continuous monitoring is followed.
Perform security validation testing through a DevSecOps process in on-premises and cloud environments.
Use ACAS and Splunk, review audit logs, and perform other cybersecurity monitoring functions.
Identify risks of implementing technology solutions and analyze their impact on desired business outcomes.
Perform other duties as assigned.