Information Systems Security Manager (ISSM)

Kentro • Tampa, FL

2d • Onsite

About The Position

Kentro is hiring an Information Systems Security Manager (ISSM) to support USSOCOM/ EDAT Zero Trust. This position will primarily operate within a Top-Secret environment and will work closely with USSOCOM engineering teams, cybersecurity personnel, system owners, architects, program leadership, and the Defense Intelligence Agency (DIA). The ideal candidate is not simply experienced in maintaining RMF documentation. We are looking for an ISSM who has personally supported multiple information systems through the full Risk Management Framework (RMF) and Authorization to Operate (ATO) lifecycle, preferably resulting in successful DIA authorization. This individual must be technically credible, organized, proactive, and capable of working collaboratively with engineers to translate technical implementations into defensible security controls and authorization evidence. This Job Description reflects the primary duties of the role; however, it is not intended to be all‑inclusive. Team members may be asked to take on additional responsibilities in alignment with customer expectations, business needs, and Kentro’s culture of collaboration and adaptability.

Requirements

• Bachelor’s degree in Cybersecurity, Information Assurance, Information Systems, Computer Science, Information Technology, Engineering, or a related technical field. Equivalent education and experience may be considered in accordance with contract and position requirements.
• Significant experience supporting cybersecurity/RMF activities within classified DoD or Intelligence Community environments.
• Hands-on experience using Xacta to develop, manage, track, or submit RMF/ATO packages.
• Demonstrated experience supporting information systems through the full RMF/ATO lifecycle.
• DoD Risk Management Framework (RMF)
• NIST SP 800-53 security controls
• Security control implementation and assessment
• System Security Plans (SSPs)
• Plans of Action and Milestones (POA&Ms)
• Vulnerability and risk management
• Continuous monitoring
• Authorization and reauthorization processes
• Ability to understand technical system architectures and communicate effectively with cybersecurity engineers, system engineers, architects, and other technical SMEs.
• Strong written and verbal communication skills with the ability to communicate cybersecurity risk to both technical and non-technical stakeholders.
• Demonstrated ability to operate effectively on a multidisciplinary team and coordinate activities across engineering, cybersecurity, program management, and government organizations.
• Must meet applicable DoD IAT Level III certification requirements
• Active TS/SCI
• US Citizen or Lawful Permanent Resident (Green Card)

Nice To Haves

• Direct experience obtaining ATOs through the Defense Intelligence Agency (DIA).
• Experience taking multiple systems from initial RMF activities through successful DIA authorization.
• Previous experience supporting USSOCOM or another Combatant Command (CCMD).
• Experience working within TS/SCI environments and classified networks.
• Previous experience operating within or supporting the SOCRATES environment.
• Experience working directly with DIA cybersecurity, assessment, or authorization personnel.
• Experience supporting complex enterprise cybersecurity programs involving multiple systems, enclaves, security boundaries, and engineering teams.
• Strong familiarity with DoD and Intelligence Community cybersecurity governance and authorization processes.

Responsibilities

• Lead and coordinate RMF and ATO activities for systems operating within USSOCOM classified environments.
• Manage systems through the complete authorization lifecycle, from initial system categorization and control implementation through assessment, authorization, continuous monitoring, and reauthorization.
• Develop, maintain, and manage authorization packages within Xacta.
• Serve as a primary cybersecurity liaison between engineering teams, system owners, program leadership, ISSOs, security assessors, and DIA authorization stakeholders.
• Work directly with engineers to understand system architecture, configurations, data flows, interfaces, security boundaries, and implemented cybersecurity controls.
• Translate technical engineering activities into appropriate RMF control implementation statements and supporting evidence.
• Develop and maintain required authorization artifacts, including SSPs, control implementation documentation, POA&Ms, risk assessments, network/system diagrams, inventories, security procedures, and supporting evidence.
• Review ATO packages for completeness, technical accuracy, consistency, and readiness prior to submission.
• Coordinate remediation of security findings and vulnerabilities with engineering teams.
• Track cybersecurity risks, deficiencies, POA&M items, dependencies, and authorization milestones through closure.
• Support security control assessments, validation activities, and responses to assessor or Authorizing Official questions.
• Maintain authorization posture following ATO through continuous monitoring, change management, vulnerability management, and reauthorization activities.
• Identify authorization risks early and communicate potential schedule or compliance impacts to program leadership.
• Participate in technical and programmatic discussions to ensure cybersecurity requirements are incorporated into engineering decisions rather than addressed only at the end of the development lifecycle.
• Build productive working relationships across the program and maintain professional, collaborative engagement with USSOCOM and DIA stakeholders.

Benefits

• Paid time off
• Healthcare benefits
• Supplemental benefits
• 401k including an employer match
• Discount perks
• Rewards
• Education reimbursement for certifications, degrees, or professional development.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior