Information Systems Security Manager

ECS Tech Inc•Tampa, FL

14h

About The Position

Everforth ECS is seeking an experienced Information Systems Security Manager (ISSM) to support the United States Special Operations Command (USSOCOM). The ISSM manages and maintains the cybersecurity posture of assigned information systems and ensures compliance with applicable Department of Defense (DoD), USSOCOM, and Intelligence Community cybersecurity policies, standards, and directives. The ISSM serves as the principal cybersecurity advisor to the Program Manager, Information System Owner, Authorizing Official (AO), and other government stakeholders. The role oversees cybersecurity policy implementation and maintenance, Risk Management Framework (RMF) activities, system authorization processes, and protection of the confidentiality, integrity, and availability of mission-critical information systems. The position requires extensive DoD cybersecurity experience, strong technical knowledge of RMF and authorization requirements, and the ability to work independently in a dynamic Special Operations environment.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technical discipline; equivalent combinations of relevant education and experience may be considered where permitted by contract requirements.
At least 5 years of progressively responsible cybersecurity or information assurance experience.
Demonstrated experience performing ISSM, ISSO, cybersecurity management, or equivalent information system security responsibilities.
Direct, hands-on experience supporting the DoD RMF lifecycle, including security control implementation, assessment, authorization, and continuous monitoring.
Demonstrated experience developing and maintaining SSPs, SARs, POA&Ms, and ATO documentation.
Experience coordinating cybersecurity activities with government Authorizing Officials, security control assessors, program managers, and system owners.
Experience with vulnerability management, incident response coordination, security testing, and configuration management.
Strong knowledge of NIST security controls, DoD cybersecurity policies, and information system security best practices.
Excellent written and verbal communication skills, including the ability to explain complex cybersecurity risks to technical and nontechnical stakeholders.
Meet applicable foundational qualification requirements for DCWF Work Role 722, Information Systems Security Manager, at the Intermediate proficiency level, in accordance with DoDM 8140.03 and the current DoD 8140 Qualification Matrix.
Establish qualification through an accepted pathway, such as approved education, training, accredited personnel certification, or an authorized experience-based qualification assessment.
Ensure personnel certifications used to satisfy foundational requirements meet applicable accreditation standards and are recognized for the assigned DCWF work role and proficiency level.
Possess an active U.S. Government Top Secret security clearance with eligibility for access to SCI if required by the supported program.
Be a U.S. citizen.

Nice To Haves

Cybersecurity or information assurance experience supporting DoD or Intelligence Community systems.

Responsibilities

Manage and maintain the cybersecurity posture of assigned information systems.
Ensure compliance with DoD, USSOCOM, and applicable Intelligence Community cybersecurity policies, standards, and directives.
Serve as the principal cybersecurity advisor to the Program Manager, Information System Owner, Authorizing Official, and other government stakeholders.
Oversee implementation and maintenance of cybersecurity policies.
Manage RMF activities and support system authorization processes.
Ensure the confidentiality, integrity, and availability of mission-critical information systems.
Perform cybersecurity management and information system security responsibilities, including security control implementation, assessment, authorization, and continuous monitoring.
Develop and maintain SSPs, SARs, POA&Ms, and ATO documentation.
Coordinate cybersecurity activities with government Authorizing Officials, security control assessors, program managers, and system owners.
Support vulnerability management, incident response coordination, security testing, and configuration management.
Maintain current cybersecurity credentials and provide supporting documentation as required.
Maintain required clearance, access eligibility, and applicable security requirements throughout employment.
Meet resident qualification and continuing professional development requirements as directed by DoD policy and the responsible government organization.