Information Systems Security Manager (ISSM) -305308

Delaware Nation Industries • Hampton, VA

9d

About The Position

We are seeking a senior Information Systems Security Manager (ISSM) to serve as the Subject Matter Expert (SME) for the Combined Air Operations Center – eXperimental (CAOC-X) enclave. The ISSM provides comprehensive cybersecurity support for CAOC-X applications, tests, experiments, and exercises. This role leads cybersecurity operations, manages the full Risk Management Framework (RMF) lifecycle, and ensures that TS/SCI and NIPRNET environments comply with Federal, DoD, and Air Force directives. The ISSM serves as the focal point for cybersecurity matters and works with engineering, architecture, and mission teams to ensure secure integration and protection of multi-classification environments.

The role requires leadership of ISSOs and cybersecurity teams, coordination with technical and mission stakeholders, and direct coordination with the Authorizing Official (AO) and Security Control Assessor (SCA). The ISSM evaluates technical designs, system changes, and architectural impacts from a cybersecurity perspective, and authors, reviews, and redlines cybersecurity and engineering documentation.

Candidates must have an active Secret clearance with the ability to be upgraded to Top Secret/SCI, at least 10 years of relevant cybersecurity experience, a qualifying master's degree or doctorate, completion of the Information System Security Manager (Advanced) Playlist, and one of the listed cybersecurity certifications. Compensation is $135,000–$150,000.

Requirements

• At least 10 years of experience in a relevant cybersecurity field.
• Master's degree or doctorate in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering.
• Active Secret clearance with the ability to be upgraded to Top Secret/SCI.
• Completion of the Information System Security Manager (Advanced) Playlist.
• Possession of one or more of the listed certifications: CISM, CISSP, CISSP-ISSMP, FITSP-M, GCIA, GCIH, GICSP, or GSLC.
• Demonstrated experience creating, managing, and maintaining RMF documentation and artifacts.
• Experience with cyber certification processes for ATO, ATC, and IATT on NIPRNET and SIPRNET.
• Hands-on experience implementing STIGs and managing Information Assurance Vulnerability Management (IAVM) programs.
• Experience with Commercial Solutions for Classified (CSfC) cross-domain solutions and their certification processes.
• Proficiency with vulnerability management and security tools, including ACAS, NeuVector, and ESS.
• Experience with SIEM tools.
• Deep understanding of RMF, STIGs, and DoD cybersecurity policy.
• Knowledge of multi-classification environments, including NIPRNET, SIPRNET, and TS/SCI.
• Strong technical writing skills for SSPs, POA&Ms, and other RMF artifacts.
• Excellent communication, briefing, and time-management skills.
• Ability to lead ISSOs and provide cybersecurity guidance to stakeholders.
• Ability to lead cybersecurity teams and coordinate with technical and mission stakeholders.
• Ability to coordinate with the AO and SCA on assessments, evidence collection, and risk determinations.
• Ability to author, review, and redline cybersecurity and engineering documentation.
• Ability to evaluate technical designs, system changes, and architectural impacts from a cybersecurity perspective.

Nice To Haves

• Experience with AOC systems, architecture, and networking.
• Experience with Zero Trust principles and implementation.
• Experience with Windows and Linux operating systems, ACAS/ESS, and HBSS.

Responsibilities

• Serve as the senior cybersecurity authority for CAOC-X information systems and ensure compliance with applicable directives, including AFI 17-101, DoDI 8510.01, and NIST SP 800-53.
• Develop, manage, and maintain RMF documentation and certification and accreditation (C&A) packages for classified and unclassified systems.
• Lead Authority to Operate (ATO) activities, including package development for ATO, Authority to Connect (ATC), and Interim Authority to Test (IATT).
• Serve as the cybersecurity focal point for COMPUSEC, COMSEC, and TEMPEST matters.
• Oversee vulnerability management, STIG/SRG implementation, patching, and remediation using tools such as ACAS, NeuVector, and Endpoint Security Solutions (ESS).
• Lead identification, evaluation, and mitigation of physical, technical, and administrative risks to the AOC and Air Force Global Information Grid.
• Maintain awareness of the cybersecurity posture, initiate corrective actions, and lead local cyber incident response activities.
• Conduct annual security reviews and testing of cybersecurity controls.
• Lead ISSOs and provide cybersecurity guidance to CAOC-X stakeholders.
• Lead cybersecurity teams and coordinate with technical and mission stakeholders.
• Coordinate with the AO and SCA to support assessments, evidence collection, and risk determinations.
• Author, review, and redline cybersecurity and engineering documentation.
• Evaluate technical designs, system changes, and architectural impacts from a cybersecurity perspective.

Benefits

• 100% coverage of employee benefit premiums, including medical (PPO or HDHP option), vision, and dental.
• Matching 401K.
• Short- and long-term disability.
• Pet insurance.
• Professional development and education reimbursement.
• Parking and transit benefits for NY, NJ, ATL, and DC Metro areas.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior