Information Systems Security Manager (ISSM)

American Systems•Colorado Springs, CO

About The Position

AMERICAN SYSTEMS is an employee-owned federal government contractor supporting national priority programs through strategic solutions in Information Technology, Test & Evaluation, Program Mission Support, Engineering & Analysis, and Training. The Information Systems Security Manager will perform as ISSM for up to five MD9 mission systems and serve as the principal advisor on information systems security matters. The role develops, implements, and maintains cybersecurity strategies across network environments; configures security policies, technical controls, and procedural frameworks to support compliance with DoD Information Assurance Risk Management Framework (DIARMF) standards; and supports multiple Authority to Operate (ATO) packages. It provides technical leadership on systems security engineering and oversees cybersecurity integration throughout design, development, testing, deployment, and sustainment.

Requirements

Bachelor's degree.
11–12 years of related work experience.
TS/SCI clearance.
U.S. citizenship, required to obtain or hold a U.S. security clearance.
Meet DoD 8140 qualification requirements for the Information Systems Security Manager work role (work role code 722) at the Advanced proficiency level.
Hold one or more of the following certifications: CISM, CISSP, FITSP-M, GCIH, GCIA, GICSP, GSLC, or ISSMP.

Responsibilities

Perform as ISSM for up to five MD9 mission systems and serve as principal advisor on information systems security matters.
Provide security program and policy support and oversee ISSOs.
Support certifications, vulnerability monitoring and testing, security documentation repositories, inspections, incident response, and training.
Support Change Control Boards (CCBs) and Risk Boards, continuous monitoring (CONMON), and authorization impact assessments.
Develop, implement, and maintain cybersecurity strategies across network environments.
Configure security policies, technical controls, and procedural frameworks to support DIARMF compliance.
Author security assessment reports, System Security Plans (SSPs), and Risk Assessment Reports (RARs) for multiple ATO packages.
Conduct security control testing and vulnerability assessments.
Provide technical leadership and guidance on systems security engineering best practices to project teams and stakeholders.
Oversee cybersecurity integration and implementation of security controls during design, development, test, deployment, and sustainment.
Support vulnerability management, including scanning, analysis, remediation planning, and status reporting.