Information System Security Manager (ISSM)

Astrion

10d•Onsite

About The Position

Astrion has an exciting opportunity for an Information Systems Security Manager (ISSM) to support our customers with Cybersecurity Integration in the 96th Test Wing at Eglin AFB, FL. The Information System Security Manager (ISSM) will serve as the principal advisor on all information systems security matters, operating at an organizational level with broad strategic responsibilities, to include those supporting a large Infrastructure and Modernization (I&M) effort for the Eglin 96th Test Wing (TW), 96th Range Group.

Requirements

Masters degree in Computer Science, Information Systems, Cybersecurity, or a related field.
Minimum of 10 years of experience as an Information System Security Manager or in a similar role, with demonstrated experience in managing cybersecurity programs in a DoD environment.
Must possess a FINAL (no interim) Top Secret clearance, with an investigation current within 6 years. Specific areas of support require a Top Secret clearance based on a Single Scope Background Investigation (SSBI), SSBI Periodic Reinvestigation (SSBI-PR), or a Phased Periodic Reinvestigation or equivalent investigation current within 6 years.
Deep understanding of DoD and Air Force cybersecurity policies, regulations, and standards including special access programs (SAP).
Must possess one of the following certifications and must be current/maintained: CISSP or CISM
Deep understanding of information security principles, mechanisms, and best practices.
Extensive knowledge of security frameworks and standards (e.g., NIST 800-53, NIST Risk Management Framework (RMF), CNSS, JSIG).
Expertise in risk management methodologies and security assessment techniques.
Extensive experience with security assessment tools and techniques (e.g., vulnerability scanners, penetration testing).
Strong understanding of network security concepts (e.g., firewalls, intrusion detection/prevention systems, VPNs).
Experience with cryptography, including encryption algorithms, key management, and digital signatures.
Extensive experience with cloud security principles and practices (e.g., AWS, Azure, Google Cloud).
Experience with security incident response and handling.
Experience with security information and event management (SIEM) systems.
Experience analyzing security logs and identify potential security threats.
Strong communication and interpersonal skills, with the ability to effectively communicate technical information to both technical and non-technical audiences.
Ability to work independently and as part of a team.
Will be some walking as we travel to site locations some of which will be undeveloped or in construction.
Occasional travel will be required.

Nice To Haves

Experience working on a military range, with a demonstrated understanding of the unique cybersecurity challenges associated with such environments.

Responsibilities

Function as the principal advisor on all information systems security matters, operating at an organizational level with broad strategic responsibilities.
Engage and Interact with applicable stake holders in all phases of the NIST RMF framework to achieve and maintain Authority to Operate (ATO)
Develop, implement, and maintain the overall information security program for assigned systems and networks.
Drive the consolidation and standardization of squadron ATO efforts to enhance overall operational efficiency.
Collaborate extensively with other Information Assurance personnel to develop a comprehensive understanding of their ATO systems and solicit feedback for improvements.
Develop and implement solutions and guidance that standardize, streamline, and improve squadron ATO processes.
Engage with third-party vendors under government contract(s) to meet the criteria required to achieve ATO modernization goals.
Ensure security policies, standards, and procedures are aligned with federal mandates such as FISMA and NIST frameworks, as well as DoD and Air Force cybersecurity directives.
Oversee risk management programs, compliance activities, security awareness and training initiatives.
Serve as the expert on securing complex, diverse set systems, that include elements of radio frequency (RF) subsystems, SATCOMs, range instrumentation systems, radars and telemetry, and traditional IT infrastructure that may fall into the domain of special access programs (SAP).
Develop, implement, and maintain comprehensive security plans, policies, and procedures that align with all applicable federal requirements, such as FISMA, NIST frameworks, DoW, and Air Force cybersecurity directives.
Orchestrate risk management programs, evaluating threats, vulnerabilities, and potential impacts across the organization's information systems portfolio, ensuring compliance with applicable Security Classification Guides (SCGs).
Coordinate and consult with Authorizing Official (AO) office roles such as the security control assessor representative (SCAR) to complete external audits or assessments.
Translate complex security requirements into actionable guidance for implementation teams.
Ensure compliance with established procedures for user access, system accreditation/certification, hardware/software usage, incident response, documentation maintenance, system lifecycle security, audit trails, user authentication, and security safeguard implementation.
Oversee the implementation of security controls at new sites, ensuring physical cybersecurity considerations are integrated from the ground up, including access controls, surveillance systems, and environmental safeguards.
Implement and manage continuous monitoring (CONMON) programs to effectively enforce and continuously evaluate security performance parameters of systems under ATO
Provide expertise and guidance to software development entities to develop and maintain a secure software development framework (SSDF) addressing secure coding practices, cryptography implementation, security testing methodologies, vulnerability management, and incident response.