Information Systems Security Manager (ISSM)

Decision Technologies, Inc.•Austin, TX

171d•$115,000 - $130,000

About The Position

Decision Technologies is seeking an Information Systems Security Manager (ISSM) to provide cybersecurity oversight, governance, and compliance management for the organization’s SIPRNet circuit and associated classified information systems. The ISSM ensures compliance with Department of Defense, Intelligence Community, and federal cybersecurity requirements; maintains system accreditation; and leads security operations for mission-critical classified environments. An active Secret or TS/SCI clearance is required as determined by the position or organization. The role leads cybersecurity program activities, oversees Risk Management Framework (RMF) compliance and documentation, and maintains the system’s Authorization to Operate (ATO). It also coordinates system hardening and change management, classified-data protection, audits and inspections, incident response, access controls, user training, and communication with leadership and security stakeholders. The position is based in Austin, Texas, and requires travel of less than 10%.

Requirements

Active Secret or TS/SCI clearance, as required by the position or organization.
Deep understanding of DoD SIPRNet architecture and classified network handling rules.
Proficiency in network security principles, including firewalls, IDS/IPS, encryption technologies, and cross-domain constraints.
Experience managing secure enclaves, boundary protections, and classified physical security requirements.
Hands-on experience with vulnerability scanning and auditing tools such as ACAS/Nessus.
In-depth knowledge of the DoD RMF lifecycle.
Ability to create, review, and maintain RMF control evidence and accreditation documentation.
Experience interacting with AOs, cybersecurity compliance teams, and inspection authorities.
Excellent written and verbal communication skills and ability to prepare and deliver leadership briefings.
Highly organized, detail-oriented, and capable of managing multiple concurrent tasks.
DoD 8570/8140 IAM Level II or III certification, such as CAP, CISSP, CASP+, CISM, GSLC, or equivalent.
Bachelor’s degree from an accredited university, or CNSSI 4012 certificate, or ADQ GA7.
3–5 years of experience as an ISSM, ISSO, or in a similar cybersecurity leadership role.

Nice To Haves

Completion of NEC 2779 (CIN: A-531-0009), NEC 3372 (CIN W-3B-1500, EKMS Manager), or A-4C-1340 (KMI); completion is described as required or strongly preferred.
Experience with ACAS, Nessus, audit tools, and configuration management systems.

Responsibilities

Lead and manage the cybersecurity program for the SIPR circuit and all connected classified systems.
Ensure compliance with DoD, Intelligence Community, and federal cybersecurity policies, including RMF, NIST SP 800-53, CNSSI 1253, and applicable DoD instructions.
Develop, document, review, and maintain RMF artifacts, including SSPs, CONOPS, POA&Ms, SARs, and continuous monitoring records in eMASS.
Conduct or supervise risk assessments, vulnerability evaluations, and threat analysis; identify residual risks and recommend mitigation strategies.
Maintain the system’s ATO and ensure continuous monitoring requirements are met.
Review and approve security-relevant configuration or software changes affecting the SIPR network.
Validate STIG implementation, configuration baselines, security patches, and vulnerability remediation.
Coordinate with network administrators, ISSOs, engineers, and security teams to execute system hardening and compliance activities.
Ensure classified data is properly handled, transmitted, and stored.
Validate boundary protection mechanisms, enclave configurations, and physical security requirements for SIPR systems.
Maintain accurate, auditable security documentation and system records.
Prepare cybersecurity reports for inspections, audits, and system reviews.
Lead remediation of audit findings, compliance gaps, and security vulnerabilities.
Manage cybersecurity incident response procedures for the SIPR environment and coordinate reporting to government authorities as required by DoD policy.
Oversee account management, auditing, and access-control enforcement.
Ensure SIPR users complete required cybersecurity training and understand classified-handling procedures.
Brief leadership, participate in meetings, and engage with auditors, AOs/DAOs, and other cybersecurity stakeholders.
Communicate technical security issues clearly to technical and non-technical audiences.