Information System Security Manager (ISSM)

ProSource360 Consulting Services, Inc•San Antonio, TX

4d•Onsite

About The Position

ProSource360 Consulting Services, Inc. is seeking an Information System Security Manager (ISSM) to serve as the senior cybersecurity lead for the Tri-Service Research Laboratory (TSRL). The ISSM oversees Risk Management Framework (RMF) implementation, Authority to Operate (ATO) maintenance, cybersecurity compliance, and security posture across NIPRNet, DREN, RDT&E, SIPRNet, and standalone systems and enclaves. The role provides technical and policy guidance to personnel, advises senior leadership and the Authorizing Official on cybersecurity risk, and helps ensure systems meet applicable DoD and federal security requirements. The position is on-site at JBSA–Fort Sam Houston in San Antonio, Texas, and is scheduled to start November 30, 2026. Occasional after-hours tasks and couriering classified equipment or media within TSRL may be required.

Requirements

Bachelor of Science degree in Information Technology or Cybersecurity; a copy of the degree or transcript must be provided.
At least five years of demonstrated experience working with RMF requirements and providing cybersecurity services.
No more than three consecutive years of lapse in cyberspace work.
Current, valid CompTIA Security+ certification; verification information and expiration date must be provided.
Education, training, or certifications meeting applicable DoDM 8140.03 requirements for DoD 8140 work role 722 (ISSM); candidates should identify all relevant certifications held.
Demonstrated intermediate-level cybersecurity work-role experience.
Ability to obtain and maintain the required SECRET clearance and Government access; an active SECRET clearance is strongly preferred due to classified/SIPRNet duties.
Ability to support occasional after-hours tasks and courier classified equipment/media within TSRL when required.
Ability to work on-site at JBSA–Fort Sam Houston in San Antonio, Texas.
Ability to start November 30, 2026.

Nice To Haves

Active SECRET clearance and an existing Common Access Card (CAC) or recent DoD background investigation.
Hands-on eMASS package management and ATO maintenance experience.
Experience with ACAS, STIG compliance, and IAVM processes.
Prior ISSM experience supporting DREN, RDT&E, research-laboratory networks, or classified SIPRNet enclaves.
Advanced cybersecurity certifications beyond Security+, such as CISSP, CISM, or CGRC/CAP.
Experience supporting cybersecurity audits, inspections, and Inspector General reviews.
Experience briefing senior leaders and supporting cybersecurity working groups.
Residence in or near the San Antonio metropolitan area.

Responsibilities

Lead and coordinate RMF activities and support the granting and continued validity of ATOs in accordance with NIST SP 800-53 Rev. 5, CNSSI 1253, DoDI 8510.01, and related directives.
Administer and track systems and enclaves in eMASS; maintain RMF package repositories and upload changes to ATO documentation within three business days.
Prepare, review, and maintain System Security Plans, Security Assessment Reports, Plans of Action and Milestones (POA&Ms), risk assessments, topology diagrams, hardware/software inventories, and security procedures.
Oversee vulnerability assessment and remediation activities using ACAS or other Air Force-approved tools; interpret findings and track corrective actions.
Coordinate STIG hardening, IAVM reporting and compliance, configuration management reviews, audits, inspections, and Inspector General activities.
Validate that administrative and technical personnel meet applicable DoD 8140 baseline certification and training requirements before elevated access is granted.
Administer signed Privileged Access Agreements and conduct recurring audits of privileged accounts.
Advise senior management and the Authorizing Official on cybersecurity risks, system security posture, and recommended mitigation actions.
Ensure required cybersecurity training is completed and support account onboarding/offboarding, including DD Form 2875 routing.
Support cybersecurity working groups, prepare metrics and briefings, and communicate cybersecurity matters to senior leaders and stakeholders.
Support cloud cybersecurity strategy and enterprise IT pilot initiatives, including virtualization, collaboration systems, mobile technologies, cloud services, and automation.
Coordinate quarterly media destruction and, when required, courier classified equipment or media within TSRL in accordance with security procedures.
Assist with Memoranda of Agreement (MOAs), Memoranda of Understanding (MOUs), and Area of Responsibility (AOR) letters supporting the RMF Accreditation Program.