ISSM (PL)

Canvas Inc. • Eglin AFB, FL

2d

About The Position

The ISSM leads cybersecurity and information assurance for assigned systems, including development and maintenance of security plans, policies, and procedures aligned with federal, DoD, and Air Force requirements. The role oversees the cybersecurity lifecycle and Authorization to Operate (ATO) package, ensuring compliance with the Risk Management Framework (RMF) and/or Joint Special Access Program Implementation Guide (JSIG).

The ISSM manages user access and clearances, oversees security controls and continuous monitoring, maintains system security posture, and coordinates audits and incident response. The role also supports security awareness training, threat and vulnerability evaluation, compliance with regulations and Security Classification Guides (SCGs), and development of security architecture documentation. The ISSM collaborates with engineering, IT, and stakeholder teams to integrate security requirements into system architectures and operations, and prepares reports, briefings, and recommendations for leadership.

Requirements

• US citizenship.
• Must possess or be able to obtain and maintain a Top Secret clearance.
• Master’s degree in Cybersecurity, Information Assurance, Computer Science, or a related field and at least 10 years of relevant experience; OR a bachelor’s degree in a related field and at least 18 years of relevant experience; OR 12 years of relevant experience in lieu of a master’s degree.
• Demonstrated experience managing cybersecurity and information assurance for Air Force or DoD information systems.
• In-depth knowledge of RMF, JSIG, NIST 800-53, DoDI 8500.01, DoDM 8140.03, and other relevant standards.
• Proficiency in security tools, vulnerability assessment, and incident response processes.
• Strong analytical, organizational, and communication skills.
• Ability to lead multidisciplinary teams and manage complex security projects.

Nice To Haves

• Relevant professional certifications, such as CISSP, CISM, or Security+.

Responsibilities

• Lead development, implementation, and maintenance of security plans, policies, and procedures aligned with federal mandates, DoD, and Air Force directives.
• Oversee the cybersecurity lifecycle and ATO package for assigned systems, ensuring RMF and/or JSIG compliance.
• Manage user access and verify clearances, authorization, and need-to-know.
• Oversee implementation and validation of security controls, perform continuous monitoring, and maintain system security posture.
• Coordinate and support external audits and incident response efforts, and translate security requirements into actionable guidance.
• Provide oversight of security awareness and training initiatives for system users.
• Evaluate threats and vulnerabilities, ensure compliance with security regulations and SCGs, and support development of security architecture documentation.
• Collaborate with engineers, IT professionals, and stakeholders to integrate security requirements into system architectures and operations.
• Prepare and present reports, briefings, and recommendations to leadership and stakeholders.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior