Information Systems Security Manager

ECS Federal•TAMPA, FL

About The Position

Everforth ECS is seeking an experienced Information Systems Security Manager (ISSM) to support the United States Special Operations Command (USSOCOM). The ISSM manages and maintains the cybersecurity posture of assigned information systems and ensures compliance with applicable Department of Defense (DoD), USSOCOM, and Intelligence Community cybersecurity policies, standards, and directives. The ISSM serves as the principal cybersecurity advisor to the Program Manager, Information System Owner, Authorizing Official (AO), and other government stakeholders. The role oversees implementation and maintenance of cybersecurity policies, manages Risk Management Framework (RMF) activities, supports system authorization processes, and helps ensure the confidentiality, integrity, and availability of mission-critical information systems. The candidate should be able to operate independently in a dynamic Special Operations environment. The position requires meeting applicable DoD Cyber Workforce Qualification Requirements for DCWF Work Role 722, Information Systems Security Manager, at the Intermediate proficiency level, and maintaining required cybersecurity credentials and professional development. The candidate must possess an active U.S. Government Top Secret clearance with eligibility for SCI access if required by the supported program, be able to maintain required clearances and access eligibility, and be a U.S. citizen.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technical discipline; equivalent combinations of relevant education and experience may be considered where permitted by contract requirements.
Minimum of 5 years of progressively responsible cybersecurity or information assurance experience, preferably supporting DoD or Intelligence Community systems.
Demonstrated experience performing ISSM, ISSO, cybersecurity management, or equivalent information system security responsibilities.
Direct, hands-on experience supporting the DoD RMF lifecycle, including security control implementation, assessment, authorization, and continuous monitoring.
Demonstrated experience developing and maintaining SSPs, SARs, POA&Ms, and ATO documentation.
Experience coordinating cybersecurity activities with government Authorizing Officials, security control assessors, program managers, and system owners.
Experience with vulnerability management, incident response coordination, security testing, and configuration management.
Strong knowledge of NIST security controls, DoD cybersecurity policies, and information system security best practices.
Excellent written and verbal communication skills, including the ability to explain complex cybersecurity risks to technical and nontechnical stakeholders.
Meet applicable foundational qualification requirements for DCWF Work Role 722, Information Systems Security Manager, at the Intermediate proficiency level, in accordance with DoDM 8140.03 and the current DoD 8140 Qualification Matrix.
Establish qualification through an accepted pathway, such as approved education, training, accredited personnel certification, or an authorized experience-based qualification assessment.
Ensure personnel certifications used to satisfy foundational requirements meet applicable accreditation standards and are recognized for the assigned DCWF work role and proficiency level.
Maintain current cybersecurity credentials and provide supporting documentation as required.
Possess an active U.S. Government Top Secret security clearance with eligibility for access to SCI, if required by the supported program.
Be able to maintain required clearance, access eligibility, and applicable security requirements throughout employment.
Be a U.S. citizen.

Responsibilities

Manage and maintain the cybersecurity posture of assigned information systems.
Ensure compliance with DoD, USSOCOM, and applicable Intelligence Community cybersecurity policies, standards, and directives.
Serve as the principal cybersecurity advisor to the Program Manager, Information System Owner, Authorizing Official, and other government stakeholders.
Oversee implementation and maintenance of cybersecurity policies.
Manage Risk Management Framework (RMF) activities, including security control implementation, assessment, authorization, and continuous monitoring.
Support system authorization processes and maintain authorization documentation.
Coordinate cybersecurity activities with government Authorizing Officials, security control assessors, program managers, and system owners.
Support vulnerability management, incident response coordination, security testing, and configuration management.
Maintain current cybersecurity credentials and provide supporting documentation as required.
Meet applicable resident qualification and continuing professional development requirements directed by DoD policy and the responsible government organization.
Maintain required security clearance, access eligibility, and applicable security requirements throughout employment.