Information System Security Manager

Fidelity Partners•San Antonio, TX

1d•Onsite

About The Position

The Information System Security Manager (ISSM) leads cybersecurity and Risk Management Framework (RMF) support for NIPRNet, DREN, RDTE, SIPRNet, and standalone enclaves and systems supporting the Tri-Service Research Laboratory. The role performs DoD 8140 work role 722 functions and provides enterprise risk, authorization, compliance, vulnerability-management, access-control, audit, and advisory support. The position is contingent upon contract award and is based primarily on-site at the Tri-Service Research Laboratory, Joint Base San Antonio-Fort Sam Houston, San Antonio, Texas. Temporary alternate work locations may be assigned by the COR; general telework authorization is not specified. This is one full-time position (1.0 FTE), normally Monday through Friday between 7:00 AM and 5:00 PM, not to exceed 40 hours per week. After-hours support may be required for specific tasks. The base period is November 30, 2026 through November 29, 2027, with a possible extension under FAR 52.217-8. No travel is anticipated; any required travel would be added by separate bilateral modification. The role supports the Air Force Research Laboratory (AFRL), 711th Human Performance Wing, Bioeffects Division. U.S. citizenship is required for contractor personnel requiring access to USAF bases, AFRL facilities, or Government IT networks unless a written waiver is approved by the Contracting Officer. A current Secret clearance is highly desired and is required for personnel who need classified-information or IT-II access; the highest classification level is Secret. The successful candidate must execute a nondisclosure agreement before the start of performance.

Requirements

Bachelor of Science degree in Information Technology or Cybersecurity.
At least five years of demonstrated RMF and cybersecurity experience, with no more than a three-consecutive-year lapse in cyberspace work.
Current, valid CompTIA Security+ certification.
Meet applicable DoD Manual 8140.03 education, training, certification, and intermediate-level work-role requirements for the assigned labor category.
Execute a nondisclosure agreement before the start of performance.
U.S. citizenship is required for contractor personnel requiring access to USAF bases, AFRL facilities, or Government IT networks unless a written waiver is approved by the Contracting Officer.
Provide a resume not exceeding five pages documenting the required five years of RMF/cybersecurity experience, a copy of the qualifying bachelor's degree and current Security+ certification, and a wet-signed Letter of Intent.
Provide evidence of applicable DoD 8140.03 work-role qualifications and current Secret clearance, if held; provide required security, identity, CAC, network-access, training, or onboarding documents requested by Fidelity Partners or the Government/client.

Nice To Haves

A current Secret clearance is highly desired.

Responsibilities

Perform ISSM and DoD 8140 work role 722 responsibilities for assigned classified and unclassified systems and enclaves.
Validate that administrative and technical personnel meet required baseline certifications and training before receiving elevated access.
Administer privileged-access agreements and conduct recurring audits of privileged accounts.
Advise senior management and the Authorizing Official regarding risk levels, security posture, vulnerabilities, mitigations, and changes affecting cybersecurity posture.
Direct and coordinate enterprise RMF, ATO, eMASS, STIG, vulnerability-management, audit, inspection, documentation, access-control, and remediation activities.
Administer, coordinate, and track compliance with TSRL enterprise cybersecurity architecture, strategy, plans, policy, and Risk Management Framework requirements.
Maintain valid Authorizations to Operate, current eMASS packages, security controls, assessment procedures, plans of action and milestones, and required RMF artifacts.
Prepare and maintain system security plans, assessment reports, risk reports, topology diagrams, hardware/software inventories, standard operating procedures, and related evidence packages.
Use ACAS or other approved scanning tools to identify and assess vulnerabilities and maintain STIG checklists and documented remediation plans.
Support audits, inspections, configuration-management reviews, vulnerability assessments, cloud-security activities, and cybersecurity reporting.
Coordinate account onboarding and offboarding, DD Form 2875 workflows, workforce qualification tracking, user training, media destruction, agreements, and classified-media handling as assigned.
Provide cybersecurity consulting and customer support, participate in the AFRL Cybersecurity Working Group, prepare meeting minutes and action tracking, and brief Government and industry stakeholders.
Support cybersecurity pilot projects, Inspector General activities, documentation development, system discovery, and implementation of compliant technical solutions.
Protect classified, controlled, proprietary, and sensitive information and comply with OPSEC, security, public-release, network-access, and facility requirements.