Information System Security Manager SME

Galapagos Federal Systems LLC.•Colorado Springs, CO

9d•$170,000 - $180,000

About The Position

Galapagos Federal Systems, LLC is seeking an experienced Information Systems Security Manager (ISSM) SME Level 4 to support the United States Space Force in securing mission-critical classified information systems, networks, and test and training capabilities. The role provides cybersecurity leadership, information assurance oversight, and technical guidance to help ensure compliance with Department of Defense, Department of the Air Force, Intelligence Community, and applicable Special Access Program requirements. The ISSM leads Risk Management Framework activities and supports system development, implementation, assessment, authorization, and continuous monitoring. The position manages Assessment and Authorization documentation and the Authorization to Operate lifecycle for classified systems, while coordinating with Government stakeholders, system owners, Authorizing Officials, Security Control Assessors, engineers, administrators, and security organizations. The role also provides cybersecurity recommendations and briefings to Government leadership and supports mission readiness and space superiority. The position requires an active TS/SCI clearance, at least 15 years of relevant cybersecurity experience, a qualifying bachelor's degree, and one or more specified cybersecurity certifications or equivalent military training. The posted salary range is USD $170,000–$180,000 per year. The job description lists medical, dental, vision, disability, and life insurance; flexible spending accounts; a 401(k); PTO; paid parental leave; military differential; tuition reimbursement; and paid federal holidays.

Requirements

Active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance.
At least 15 years of relevant cybersecurity experience, including management of DoD and/or IC information assurance activities supporting mission-critical defense programs.
Extensive experience implementing and managing RMF and A&A processes for classified information systems.
Expertise in DoD, DAF, IC, and applicable SAP cybersecurity policies, standards, and requirements.
Experience developing, reviewing, coordinating, and maintaining authorization packages for ATOs and IATTs.
Extensive knowledge of NIST Special Publication 800-53, JSIG, and applicable Government security control requirements.
Experience developing and maintaining SSPs, SCTMs, POA&Ms, and other RMF documentation.
Experience coordinating cybersecurity assessments, authorization reviews, and risk management with AOs, SCAs, and Government stakeholders.
Strong understanding of information systems security principles, including confidentiality, integrity, availability, access controls, vulnerability management, and secure network configurations.
Experience assessing cybersecurity risks, identifying system vulnerabilities, developing mitigation strategies, and tracking corrective actions.
Ability to develop and execute cybersecurity test plans, security control assessments, and validation procedures.
Experience evaluating cybersecurity requirements and recommending technical security solutions compatible with existing system and network architectures.
Experience supporting classified network operations, system security management, and continuous monitoring.
Experience preparing cybersecurity documentation, technical reports, executive briefings, and security recommendations for Government leadership.
Ability to independently manage complex cybersecurity initiatives, coordinate multiple stakeholders, and meet program deadlines.
Ability to complete required training and maintain applicable DoD cybersecurity workforce certifications.
Bachelor of Science degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science from an ABET-accredited or CAE-designated institution.
One or more of the following certifications, or equivalent military training/certification: Security+, CCSP, CGRC/CAP, CASP+, Cloud+, SSCP, or GSEC.
Must be a U.S. citizen and meet applicable eligibility requirements for access to Government information.

Nice To Haves

One or more of the following certifications, or equivalent military training/certification: CISM, CISSO, CISSP, CISSP-ISSMP, GCIA, GCSA, GSLC, CGIH, or FITSP-M.

Responsibilities

Provide senior cybersecurity subject-matter expertise, information systems security management, technical guidance, and information assurance oversight for classified USSF networks and mission-critical systems.
Manage and coordinate cybersecurity activities in accordance with DoD, DAF, IC, and applicable SAP requirements.
Implement and maintain cybersecurity policies, procedures, and security controls for classified systems, networks, and resources.
Lead RMF activities, including security control implementation, assessments, authorization documentation, and continuous monitoring across system lifecycles.
Develop, review, and maintain A&A documentation for ATOs, IATTs, and ongoing system authorization requirements.
Prepare and maintain SSPs, SCTMs, POA&Ms, and other cybersecurity documentation in accordance with NIST standards and JSIG.
Coordinate security assessments, authorization reviews, and risk management with AOs, SCAs, system owners, and Government cybersecurity representatives.
Assess vulnerabilities, security control deficiencies, and system risks; develop mitigation strategies and track corrective actions to completion.
Provide cybersecurity oversight for the development, implementation, modification, and extension of classified systems and Government-furnished classified networks.
Evaluate proposed cybersecurity solutions for compatibility with system and network configurations, operational requirements, and security standards.
Coordinate cybersecurity recommendations, system modifications, and security control implementations with engineers, administrators, configuration managers, and Government stakeholders.
Develop and execute cybersecurity test plans, security control validation procedures, and technical assessments.
Research cybersecurity policies, regulatory requirements, emerging threats, and technical guidance to support Government decisions and mission objectives.
Monitor program schedules, milestones, action items, and compliance requirements to support timely completion of tasks and deliverables.
Prepare, review, and update Government cybersecurity documentation, technical reports, security procedures, program reviews, and executive briefings.
Provide cybersecurity status updates, risk assessments, technical recommendations, and compliance briefings to Government leadership and project stakeholders.
Coordinate with Government personnel, program managers, technical teams, and security organizations to support cybersecurity initiatives and resolve security challenges.
Develop, implement, and maintain information systems security education, training, and awareness programs.
Support continuous monitoring and ongoing authorization to maintain system security posture, address vulnerabilities, and sustain compliance.