Information System Security Manager

Fidelity Partners•San Antonio, TX

2d•Onsite

About The Position

The Information System Security Manager (ISSM) will lead cybersecurity and Risk Management Framework (RMF) support for NIPRNet, DREN, RDTE, SIPRNet, and standalone enclaves and systems supporting the Tri-Service Research Laboratory. The role performs DoD 8140 work role 722 functions and provides enterprise risk, authorization, compliance, vulnerability-management, access-control, audit, and advisory support for the Air Force Research Laboratory (AFRL), 711th Human Performance Wing, Bioeffects Division. This is one full-time position, contingent upon contract award, primarily on-site at the Tri-Service Research Laboratory, Building 3260, Joint Base San Antonio-Fort Sam Houston, San Antonio, Texas. Hours are normally Monday through Friday between 7:00 AM and 5:00 PM, not to exceed 40 hours per week; after-hours support may be required for specific tasks. The base period is November 30, 2026 through November 29, 2027, with a possible extension. No travel is anticipated. U.S. citizenship is required for contractor personnel needing access to USAF bases, AFRL facilities, or Government IT networks, unless a written waiver is approved. A current Secret clearance is highly desired and required for personnel who need classified-information or IT-II access; the highest classification level is Secret. The role requires a Bachelor of Science degree in Information Technology or Cybersecurity, at least five years of demonstrated RMF and cybersecurity experience, a current CompTIA Security+ certification, and applicable DoD Manual 8140.03 qualifications. The employee must execute a nondisclosure agreement before starting performance. Compensation is estimated at $66.44 per hour. Fidelity Partners provides competitive salaries and benefits packages.

Requirements

Bachelor of Science degree in Information Technology or Cybersecurity.
At least five years of demonstrated RMF and cybersecurity experience, with no more than a three-consecutive-year lapse in cyberspace work.
Current, valid CompTIA Security+ certification.
Meet applicable DoD Manual 8140.03 education, training, certification, and intermediate-level work-role requirements for the assigned labor category.
Execute a nondisclosure agreement before the start of performance.
U.S. citizenship is required for contractor personnel requiring access to USAF bases, AFRL facilities, or Government IT networks unless a written waiver is approved by the Contracting Officer.
A Secret clearance is required for personnel who need classified-information or IT-II access.
Submit a resume not exceeding five pages documenting the required five years of RMF/cybersecurity experience.
Submit a copy of the qualifying bachelor's degree and current Security+ certification.
Submit evidence of applicable DoD 8140.03 work-role qualifications and current Secret clearance, if held.
Submit a wet-signed Letter of Intent.
Provide security, identity, CAC, network-access, training, or onboarding documents requested by Fidelity Partners or the Government/client.

Nice To Haves

A current Secret clearance is highly desired.

Responsibilities

Perform ISSM and DoD 8140 work role 722 responsibilities for assigned classified and unclassified systems and enclaves.
Validate that administrative and technical personnel meet required baseline certifications and training before receiving elevated access.
Administer privileged-access agreements and conduct recurring audits of privileged accounts.
Advise senior management and the Authorizing Official regarding risk levels, security posture, vulnerabilities, mitigations, and changes affecting cybersecurity posture.
Direct and coordinate enterprise RMF, ATO, eMASS, STIG, vulnerability-management, audit, inspection, documentation, access-control, and remediation activities.
Administer, coordinate, and track compliance with TSRL enterprise cybersecurity architecture, strategy, plans, policy, and Risk Management Framework requirements.
Maintain valid Authorizations to Operate, current eMASS packages, security controls, assessment procedures, plans of action and milestones, and required RMF artifacts.
Prepare and maintain system security plans, assessment reports, risk reports, topology diagrams, hardware/software inventories, standard operating procedures, and related evidence packages.
Use ACAS or other approved scanning tools to identify and assess vulnerabilities and maintain STIG checklists and documented remediation plans.
Support audits, inspections, configuration-management reviews, vulnerability assessments, cloud-security activities, and cybersecurity reporting.
Coordinate account onboarding and offboarding, DD Form 2875 workflows, workforce qualification tracking, user training, media destruction, agreements, and classified-media handling as assigned.
Provide cybersecurity consulting and customer support, participate in the AFRL Cybersecurity Working Group, prepare meeting minutes and action tracking, and brief Government and industry stakeholders.
Support cybersecurity pilot projects, Inspector General activities, documentation development, system discovery, and implementation of compliant technical solutions.
Protect classified, controlled, proprietary, and sensitive information and comply with OPSEC, security, public-release, network-access, and facility requirements.