Information System Security Manager (ISSM)

Williams International•Pontiac, MI

1d•Onsite

About The Position

Williams International is seeking an Information System Security Manager (ISSM) to establish, manage, and maintain an effective cybersecurity program for assigned information systems. The ISSM serves as the principal security advisor for those systems, ensuring compliance with government, regulatory, and organizational requirements; overseeing risk management, authorization, and continuous monitoring; and directing the operational security posture of classified information systems. The role coordinates with leadership, system stakeholders, auditors, and cybersecurity personnel to support secure system operation, timely vulnerability response, and effective implementation of security controls. The position is 100% on-site and requires U.S. citizenship. Candidates must hold a current Secret security clearance with SAP eligibility or be able to obtain and maintain one. A U.S. Government security investigation may be required, and selected candidates must meet eligibility requirements for access to classified information.

Requirements

Bachelor’s degree in a related field, such as Computer Science, Information Technology, or Cybersecurity, and 2–3 years of related experience.
Current Secret security clearance with SAP eligibility, or ability to obtain and maintain such clearance.
Current certification in good standing that satisfies DoDM 8140.03 Intermediate Personnel Certification requirements, such as Security+, CISSP, or CISM, or ability to obtain one within six months of hire.
Strong working knowledge of computer systems, system software, computer peripherals, and operating systems.
Experience operating in secure environments, such as Restricted Areas or SAP SCIFs.
Knowledge of DoD standards, RMF, DAAG processes, and JSIG directives.
Prior experience managing RMF packages and implementing DoD policies, such as DAAG, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series.
Prior experience authoring or maintaining Body of Evidence artifacts to support the RMF Authorization and Accreditation process.
High level of customer service, oral and written communication skills, and attention to detail.
Willingness to learn and adapt, with a can-do attitude.
Strong interpersonal and communication skills; ability to take initiative, work independently, and interact with internal personnel at all levels, government points of contact, and customers.
Ability to work individually and as part of a team in a diverse, rapidly changing environment.
Ability to work with limited direction and handle multiple projects on short timelines.
Proficiency with Microsoft Office Suite, including Outlook, Word, Excel, and PowerPoint.
U.S. citizenship is required.
Ability to obtain a U.S. Government Security Clearance if needed, and meet eligibility requirements for access to classified information.

Nice To Haves

Experience with or working knowledge of security-relevant tools, systems, and applications used in RMF, including eMASS, NESSUS, ACAS, and DISA STIGs/SCAP.
Experience with or knowledge of CUI, DFARS 254.204-7012, NIST SP 800-171, and CMMC.

Responsibilities

Develop, maintain, and oversee security programs, policies, and procedures for assigned systems.
Advise on technical and other matters related to the security posture of assigned information systems.
Ensure compliance with applicable cybersecurity requirements, including RMF, DAAG, JSIG, and organizational directives.
Coordinate development, review, and submission of system security artifacts, including SSPs, POAMs, policies, and procedures, and maintain accurate, accessible documentation.
Monitor and assess system vulnerabilities, threats, and security incidents; ensure timely reporting, response, and corrective action.
Oversee implementation of assigned security controls and validate compliance throughout the system lifecycle.
Maintain working knowledge of system functions, security policies, and technical safeguards to oversee security operations effectively.
Coordinate periodic system assessments, audits, inspections, and testing to evaluate security effectiveness and identify weaknesses.
Manage, maintain, and execute continuous monitoring strategies and plans for assigned systems.
Oversee configuration management policies and processes so hardware and software changes are approved, tracked, and aligned with security requirements.
Ensure ISSOs and System Administrators under the role’s purview are appointed, trained, supervised, and operating in accordance with cybersecurity policies and procedures.
Coordinate authorization activities with the AO, SCA, and other stakeholders, and ensure systems are maintained in accordance with their ATOs.
Ensure audit logs and monitoring outputs are collected, analyzed, and safeguarded.
Maintain required cybersecurity certifications and ensure personnel receive adequate training and awareness resources.
Oversee sanitization, release, and disposal of system components and media in accordance with approved procedures.
Coordinate with security officials on external, interconnected, and guest systems requiring review or approval.
Ensure appropriate response and mitigation for identified vulnerabilities, incidents, or patterns of non-compliance.
Assess changes to systems, environments, or mission needs for their impact on security posture or authorization status.
Develop performance metrics to track compliance with established policies and standards.
Document and report control failures and gaps, provide remediation guidance, and prepare management reports to track remediation activities.
Stay current on best practices and technological advancements and serve as a technical resource for cybersecurity assessment and regulatory compliance.