Information System Security Manager (ISSM)

Sawdey Solution Services•Wright Patterson AFB, OH

5d•Hybrid

About The Position

The Information System Security Manager (ISSM) / Cybersecurity Manager provides Cross Domain Solutions (CDS) Network Architect Certification and Accreditation (C&A) support and cybersecurity leadership and oversight for assigned information systems, classified networks, cross-domain solutions, laboratories, and flight-test environments at the Secret level and below. The role oversees Risk Management Framework (RMF) execution in accordance with DoDI 8510.01, AFI 17-101, applicable Air Force Research Laboratory (AFRL) guidance, and relevant customer policies and procedures. The ISSM manages implementation, documentation, testing, and continuous monitoring of applicable Information Assurance security controls; vulnerability remediation; and preparation and maintenance of security documentation and artifacts. These include control assessment responses, network topology diagrams, hardware and software inventories, ports and protocols lists, and Plans of Action and Milestones (POA&Ms). The ISSM also oversees Interim Authorization to Test (IATT) and Authorization to Operate (ATO) preparation and serves as the primary cybersecurity liaison among system owners, ISSOs, engineers, program managers, security personnel, the Authorizing Official, and government stakeholders. The position leads cybersecurity work supporting flight, laboratory, and field-testing environments and collaborates with engineering and network teams to develop and implement cross-domain security solutions. The role also provides technical direction and mentorship to ISSOs and cybersecurity specialists, assists with proposal development as required, and performs other duties as assigned. The position is located at Wright-Patterson AFB, Ohio. Telework/work-from-home is authorized when approved, in a hybrid arrangement. The annual base salary range is listed as TBD. The role requires a Top Secret/SCI clearance and U.S. citizenship.

Requirements

Demonstrated experience as an ISSM, senior ISSO, cybersecurity manager, RMF lead, or comparable information assurance leader.
Experience leading RMF activities from system categorization through IATT, ATO, continuous monitoring, and reauthorization.
Experience managing ISSOs or coordinating cybersecurity work across multidisciplinary technical teams.
Experience with eMASS, Xacta, EBS, or comparable RMF and authorization-management tools.
Strong knowledge of DoD and Air Force cybersecurity policy, RMF, security controls, vulnerability management, STIGs, and POA&M processes.
Experience evaluating risk and presenting mitigation recommendations to government stakeholders and senior leadership.
Experience with classified systems, SCI environments, cross-domain solutions, or other high-consequence security architectures.
Technical knowledge of cross-domain solutions and ability to work with engineers to develop them.
Familiarity with DoD and Air Force security and cybersecurity guidance.
Awareness of DISA STIGs, the ACAS vulnerability scanner, and the Air Force Ports, Protocols, and Services process.
Familiarity with the RMF process, including NIPR/SIPR eMASS and AFRL processes.
Technical understanding sufficient to discuss computer and network issues.
Familiarity with Air Force TEMPEST policies and processes.
Security+ CE or another contract-approved DoD baseline certification, unless the contract specifies a different minimum.
Ability to communicate effectively with the customer and fulfill all duties and responsibilities listed in the contract.
Proficiency in Microsoft Office, including Word, PowerPoint, Excel, and Outlook.
Top Secret/SCI clearance.
U.S. citizenship.

Nice To Haves

CISSP, CISM, CAP, CASP+, or another advanced cybersecurity certification.
Familiarity with XACTA for RMF work involving TS/SCI.

Responsibilities

Serve as the ISSM for assigned information systems, classified networks, laboratories, flight-test environments, and Cross Domain Solutions (CDS).
Establish and manage the system security program in accordance with DoDI 8510.01, AFI 17-101, AFRL guidance, 25 AF guidance, and applicable customer policies and procedures.
Direct and oversee ISSO activities and RMF execution, prioritizing security control implementation, assessment, remediation, and continuous monitoring.
Review and approve security documentation and RMF work products, including System Security Plans, Security Assessment Reports, POA&Ms, risk assessments, security control documentation, supporting evidence, continuous monitoring reports, and IATT and ATO packages.
Conduct, coordinate, and evaluate vulnerability scans, ACAS results, DISA STIG reviews, penetration tests, and other security assessments.
Analyze security assessment findings, explain potential mission and operational impacts, and recommend corrective actions.
Lead risk identification, analysis, mitigation, and escalation, including researching and recommending compensating controls, system modifications, or operational restrictions.
Track security deficiencies, remediation actions, and POA&M milestones through resolution or formal risk acceptance, escalating unresolved issues as appropriate.
Establish and oversee continuous monitoring processes, reporting requirements, and assessment schedules to maintain compliance and authorization readiness.
Lead and coordinate cybersecurity activities for IATT, ATO, reauthorization, security assessments, inspections, and customer reviews for laboratory, flight, and field-testing environments.
Coordinate with the AO, AOR, SCA, system owners, program and mission owners, engineers, and security personnel to maintain RMF documentation and execute authorization activities.
Brief government and contractor leadership on security posture, risks, remediation progress, POA&M status, and authorization milestones.
Coordinate with RYZT Combat ID, Blue Guardian, Test, RYSIL, engineering, and network teams to develop and implement cross-domain security solutions.
Support secure integration of Top Secret, Secret, and unclassified data into consolidated products for flight tests and demonstrations.
Support multi-sensor data fusion, integration, and testing through a common data bus in systems integration laboratories and aircraft-mounted sensor pods.
Support development of data repositories for storing, accessing, and developing multi-level sensor models and associated data.
Determine computer network architecture and infrastructure requirements supporting the RY digital strategy, including connectivity to other RY networks and hardware such as guards and diodes.
Evaluate cross-domain data flows, interfaces, and security controls for compliance with applicable cybersecurity requirements.
Support preparation of RMF documentation needed to obtain IATTs and ATOs for flight, laboratory, and field testing.
Provide technical direction, guidance, and mentorship to ISSOs and cybersecurity specialists.
Assist with proposal development as required and perform other duties as assigned.