Information System Security Manager

Bering Straits Native Corp • Anchorage, AK

3d • Onsite

About The Position

The Information System Security Manager (ISSM) serves as the primary authority for multiple classified and unclassified systems, providing strategic oversight and direction for system security programs. This role involves leading and managing the Risk Management Framework (RMF) lifecycle, overseeing continuous monitoring including log analysis and vulnerability management, and acting as a liaison with Authorizing Officials (AOs) and stakeholders. The ISSM will lead Assessment & Authorization (A&A) activities, direct POA&M management and risk mitigation, and conduct security reviews, audits, and inspections. Additionally, the position provides architectural guidance for secure system design, advises leadership on cybersecurity risks and strategies, establishes configuration management and change control processes, and leads collaboration across engineering and operations teams. The role also supports audits and compliance engagements and mentors NOC support personnel. This position has supervisory responsibilities.

Requirements

• Bachelor’s degree in Cybersecurity, IT, or related field
• 7–10 years cybersecurity experience, including 5+ years in an ISSM or senior security role.
• Experience managing RMF processes for complex systems.
• Active Secret clearance required.
• Ability to obtain TS/SCI if needed.
• CISSP or equivalent advanced cybersecurity certification required.
• Expert knowledge of NIST 800-53, RMF and DoD cybersecurity policies
• Experience with Windows/Linux, vulnerability management tools, and enterprise security architecture.
• Strong leadership, communication, and risk management skills.
• Must maintain a constant state of mental alertness.
• Must maintain a constant state of situational awareness.
• Must pass a pre-employment drug screening.
• Must have acceptable background check results.
• Must be able to obtain access to military installations (if applicable to the contract).

Nice To Haves

• Master’s degree in Cybersecurity, IT, or related field
• CASP+, CISM, or similar preferred.
• Experience in DevSecOps, R&D, or large DoD programs.
• Familiarity with tools such as eMASS, Splunk, or Xacta.
• Prior leadership experience.

Responsibilities

• Serve as the ISSM and primary authority for multiple classified and unclassified systems.
• Provide strategic oversight and direction for system security programs.
• Lead and manage RMF lifecycle across assigned systems.
• Oversee continuous monitoring including log analysis, vulnerability management, and compliance.
• Act as liaison with Authorizing Officials (AOs) and stakeholders.
• Lead Assessment & Authorization (A&A) activities and documentation.
• Direct POA&M management and risk mitigation.
• Conduct and lead security reviews, audits, and inspections.
• Provide architectural guidance for secure system design.
• Advise leadership on cybersecurity risks and strategies.
• Establish configuration management and change control processes.
• Lead collaboration across engineering and operations teams.
• Support audits and compliance engagements.
• Mentor NOC support personnel.

Benefits

• Shareholder Preference (BSNC gives hiring, promotion, training, and retention preference to BSNC shareholders, shareholder descendants and shareholder spouses who meet the minimum qualifications for the job.)

What This Job Offers

• Job Type: Full-time
• Career Level: Senior