Information Systems Security Manager (ISSM)

AMERICAN SYSTEMS•Colorado Springs, CO

7d•$191,500 - $319,700

About The Position

AMERICAN SYSTEMS is an employee-owned federal government contractor supporting national priority programs. The Information Systems Security Manager (ISSM) will oversee information security for up to five MD9 mission systems and advise on information security matters. The role develops and maintains cybersecurity strategies across network environments, implements security policies and technical controls, and ensures compliance with DoD Information Assurance Risk Management Framework (DIARMF) standards. The position provides technical leadership for systems security engineering and coordinates cybersecurity integration throughout system design, development, testing, deployment, and sustainment. It also produces security assessment documentation and supports vulnerability management and authorization activities.

Requirements

Bachelor's degree and 11–12 years of related work experience.
TS/SCI clearance.
U.S. citizenship is required to obtain or hold a U.S. security clearance.
Must meet DoD 8140 qualification requirements for the Information Systems Security Manager work role (work role code 722) at the Advanced proficiency level.
Must hold one or more of the following certifications: CISM, CISSP, FITSP-M, GCIH, GCIA, GICSP, GSLC, or ISSMP.

Responsibilities

Perform as ISSM for up to five MD9 mission systems and serve as principal advisor on matters involving information security.
Provide security program and policy support, ISSO oversight, certifications, vulnerability monitoring, testing, documentation repository management, inspections, incident support, training, CCB/Risk Board support, continuous monitoring (CONMON), and authorization impact assessments.
Develop, implement, and maintain comprehensive cybersecurity strategies across network environments.
Configure security policies, technical controls, and procedural frameworks to ensure compliance with DIARMF standards.
Author security assessment reports, System Security Plans (SSPs), and Risk Assessment Reports (RARs) for multiple Authority to Operate (ATO) packages.
Conduct security control testing and vulnerability assessments.
Provide technical leadership and guidance on systems security engineering best practices to project teams and stakeholders.
Oversee cybersecurity integration across systems throughout design, development, test, deployment, and sustainment.
Support vulnerability management, including scanning, analysis, remediation planning, and status reporting.