Information System Security Manager (ISSM)

Advent Services•San Antonio, TX

17d•Onsite

About The Position

Advent Services is seeking an Information System Security Manager (ISSM) to provide cybersecurity support at the TSRL facility at Joint Base San Antonio-Fort Sam Houston, Building 3260, San Antonio, Texas. The normal work schedule is Monday through Friday, 0700 to 1700. The role supports NIPRNet, DREN, RDTE, SIPRNet, and standalone enclaves and systems, and includes ISSM duties under the 8140 Cyberwarfare Code of 722. The ISSM administers cybersecurity compliance across the distributed AFRL organization, maintains Risk Management Framework (RMF) and Authority to Operate (ATO) requirements, manages system security documentation and eMASS packages, assesses and mitigates risks and vulnerabilities, and supports audits and inspections. The position also provides cybersecurity consultation and customer support, coordinates workforce certification and training compliance, participates in the AFRL Cybersecurity Working Group, supports Inspector General inspection activities, and contributes to enterprise IT pilot projects.

Requirements

Bachelor of Science degree in Information Technology or Cybersecurity, demonstrated by a copy of the degree.
At least five years of demonstrated experience working with RMF requirements and providing cybersecurity services, with no more than three consecutive years of lapse in cyberspace work.
Education, training, or certifications for the role or labor category in accordance with DoDM 8140.03 and current Government directives, regulations, and policies (reference DFARS 252.239-7001).
Current, valid Security Plus certification.
Intermediate-level Cybersecurity Work Role experience.

Nice To Haves

Current Secret clearance.

Responsibilities

Provide ISSM cybersecurity support for NIPRNet, DREN, RDTE, SIPRNet, and standalone enclaves and systems.
Validate that administrative and technical personnel meet mandatory baseline certification and training requirements before elevated system access; administer signed Privileged Access Agreements and conduct recurring privileged-account audits.
Serve as a cybersecurity consultant for unit technicians.
Administer, coordinate, and track compliance with TSRL enterprise cybersecurity architecture, strategy, plans, and supplemental policy across the distributed AFRL organization.
Ensure RMF requirements are met, ATOs are granted and remain valid, security documentation is current, and supported units have access to cybersecurity experts.
Assist with configuration-management reviews and maintenance, secure mechanisms, RMF updates, and internal and external audits and inspections.
Enter and monitor data and assist with AFRL data and database organization in ITIPS, AFRL RMF Workflow, and eMASS.
Maintain the TSRL and related-subsystem ATO, applying applicable NIST, CNSSI, DoD, and DISAI requirements and other RMF directives.
Advise senior management and the Authorizing Official about risk levels, security posture, and changes affecting cybersecurity posture.
Assess threats and vulnerabilities, develop security risk profiles, and conduct technical risk assessments to identify, document, and mitigate vulnerabilities across systems and enclaves.
Collect and maintain cybersecurity reporting data and maintain a digital eMASS system-package repository on the authorized information system.
Administer and track systems and enclaves in eMASS and ensure their ATOs are current.
Prepare, distribute, and maintain security plans, instructions, and SOPs, including Body of Evidence documents, System Security Plans, Security Assessment Reports, POA&Ms, risk assessment reports, topology diagrams, and software and hardware lists.
Ensure remediation plans are in place for vulnerabilities identified during assessments, audits, and inspections.
Maintain ATO/eMASS package artifacts for semi-annual inspection and upload required documentation changes to eMASS within three business days.
Maintain STIG hardening checklists and implement remediation actions for findings from cybersecurity audits and inspections.
Support cybersecurity inspections and audits by Government agencies.
Coordinate eMASS changes with the TSRL IT lead; implement, assess, manage, and monitor eMASS security controls and assessment procedures, while preventing erroneous overwrites of other team members' data.
Use ACAS or other Air Force-approved scanning software to review audit controls and interpret vulnerability scan results.
Conduct application vulnerability assessments and technical and non-technical risk and vulnerability assessments of relevant technology, including applications and software.
Implement IAVM dissemination, reporting, and compliance procedures.
Apply cybersecurity strategy to cloud computing service and deployment models.
Perform applicable training and ensure TSRL users meet cybersecurity training requirements for continued network access.
Execute logical system access onboarding and offboarding, maintain SOPs for DD Form 2875 submission and routing, and coordinate organizational accounts.
Schedule and complete quarterly media destruction in accordance with Air Force and local policies.
Attend cybersecurity meetings in person or virtually as required and provide meeting minutes for RMF support.
Collaborate on system discovery and unit discussions to categorize systems for eMASS, engineer compliant cybersecurity solutions, develop security policies, and assist with hardware and software entry and exit requirements.
Assist with TSRL MOAs, MOUs, and AOR letters for the RMF Accreditation Program; update documents annually, conduct complete reviews every three years, and courier classified equipment or media to approved TSRL destinations under applicable regulations.
Track and report DoW 8140.03 certification requirements for TSRL personnel, participate in related teleconferences and meetings, and work with the Government lead on compliance metrics and briefings.
Support the AFRL Cybersecurity Working Group, including monthly VTCs, roll call, note-taking, action tracking, project facilitation, requirements gathering, and development of cybersecurity processes, concepts of operation, implementation standards, and policies.
Brief DoW, Joint, Air Force, AFRL, and industry senior leaders on S&T-related IT and cybersecurity efforts and recommendations.
Provide unit customer service by answering cybersecurity questions, explaining processes and policies, and recommending cybersecurity configurations and implementation approaches.
Support the Inspection Functional Lead for the Comm functional area in pre- and post-inspection activities.
Support research, selection, implementation, operation, metrics collection, and reporting for TSRL IT pilot or exploratory projects with potential enterprise-wide benefits. Project areas may include cybersecurity, virtualization, collaborative systems, research computing, mobile technologies, automated IT management, and public, private, or hybrid cloud services.