Information Systems Security Manager (ISSM)

General Dynamics Information Technology • Boone, MO

3d • $106,250 - $143,750 • Onsite

About The Position

The Information Systems Security Manager (ISSM) provides cyber security guidance and support to maintain regulatory compliance and overall cyber readiness. The role supplies the personnel, knowledge, skills, abilities, staff support, and other resources needed to perform Risk Management Framework (RMF) services and help the Government maintain Assessment and Authorization (A&A) packages. The ISSM serves as the primary cyber security point of contact for assigned systems and performs ISSM duties under applicable Air Force and Department of War instructions. The position is located onsite at Ramstein AB, Germany, and requires Secret clearance and U.S. citizenship.

The ISSM prepares and maintains system security and risk documentation, supports authorization and continuous monitoring, evaluates vulnerabilities, and advises stakeholders on security posture. The role also supports cybersecurity operations for enclave systems, coordinates with Government and contractor personnel and mission partners, and provides consulting advice to cyber professionals and ISSMs across USAFE-AFAFRICA. The position requires extensive RMF, eMASS or XACTA, ACAS, STIG, and cybersecurity regulatory knowledge, as well as a relevant degree or qualifying experience substitution. The advertised likely salary range is $106,250–$143,750, subject to experience, location, and contractual requirements.

Requirements

• U.S. citizenship is required.
• Must currently possess a Secret security clearance and be able to obtain a Secret clearance.
• At least 10 years of general experience, including at least 8 years of specialized experience defining computer security requirements for high-level applications, evaluating approved security product capabilities, and resolving computer security problems.
• Extensive knowledge and proficiency with the Risk Management Framework (RMF) and experience with eMASS or XACTA.
• Extensive knowledge and proficiency with the Assured Compliance Assessment Solution (ACAS) Vulnerability Scanner.
• Extensive knowledge and proficiency implementing Security Technical Implementation Guides (STIGs) and using automation tools such as SCAP, STIG Viewer, and eMASSter.
• Strong technical background, including familiarity with virtualization technologies, basic networking, and industry best practices.
• Expert knowledge of cybersecurity best practices and Federal and Department of War cybersecurity regulations and policies.
• A bachelor's degree in computer science/systems, information systems/technology, engineering/engineering technology, software engineering/programming, management, natural sciences, social sciences, mathematics, or business/finance; alternatively, a master's degree in a listed subject plus 8 years of general experience including 6 years specialized experience, or no degree plus 13 years of general experience including 11 years specialized experience.
• DoW 8570.01M Information Assurance Manager (IAM) Level III certification.
• Must meet TESA requirements: bachelor's degree and 3 years of recent specialized experience, associate degree and 7 years of recent specialized experience, or no degree and 11 years of recent specialized experience.
• Must be able to work onsite at the international work location.
• Scheduled for 40 hours per week; travel required is less than 10%.

Responsibilities

• Serve as the primary cybersecurity point of contact for systems, ensuring compliance with security policies, procedures, and regulations and disseminating information about threats, risks, and authorization status to stakeholders.
• Oversee system accreditation and certification in accordance with Department of War, Intelligence Community, and agency requirements.
• Prepare documentation for A&A package submissions in accordance with Federal, Department of War, Air Force, and local RMF policies, regulations, and standards.
• Prepare and submit System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and risk assessments; collaborate with Authorizing Officials to achieve and maintain Authorization to Operate (ATO) status.
• Gather information and documentation for Enclave ISSMs in support of Command Cyber Readiness Inspections (CCRI).
• Review DISA STIGs and ACAS vulnerability scans, provide remediation feedback, and implement RMF continuous monitoring efforts.
• Develop and recommend information-system security policies and procedures; conduct security evaluations, audits, and reviews to identify vulnerabilities and risks.
• Develop RMF Control Family plans and procedures and ensure adherence to them.
• Recommend and implement security-policy education programs for systems, network, and data users, and participate in network and systems design to ensure appropriate security policies are implemented.
• Provide consulting advice to cyber professionals and ISSMs for USAFE-AFAFRICA.
• Apply cybersecurity concepts, practices, and procedures to ensure secure integration and operations; independently evaluate and resolve complex cyber-related problems.
• Coordinate with contractor personnel and mission partners to complete assigned tasks.
• Support, monitor, test, and troubleshoot hardware and software cybersecurity problems pertaining to the enclave.
• Develop system-wide information-security requirements based on user, policy, regulatory, and resource demands for complex network and enclave systems.
• Draft cybersecurity policies and procedures.
• Draft and maintain IT Support Level Agreements, Memorandums of Agreement, and Memorandums of Understanding between Enclave ISSMs and system owners.
• Follow Government change-configuration-control processes and attend meetings as required by the COR or TR.
• Apply information-security and cybersecurity policies, principles, and practices in delivering IT services; perform ISSM duties under AFMAN 17-01 and DoWI 8510.01 for assigned systems and applications.
• Maintain familiarity with relevant Department of War and NIST RMF publications, including NIST 800-53, 800-60, 800-37, DOWI 8540.01 CDS Policy, and DOW Directive 5144.02.

Benefits

• Medical plan options, some with Health Savings Accounts, for U.S.-based employees.
• Dental plan options for U.S.-based employees.
• Vision plan for U.S.-based employees.
• 401(k) plan with pre-tax and post-tax contributions and a company match for U.S.-based employees.
• Full flex work weeks where possible.
• Paid time off plans including vacation, sick and personal time, holidays, paid parental, military, bereavement, and jury duty leave.
• Short- and long-term disability benefits.
• Life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance are provided or available.
• International assignments may include allowances, premium uplifts, and/or relocation or transportation benefits, depending on individual circumstances and location.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior