Issm (Pl)

Canvas•Eglin AFB, FL

About The Position

The ISSM (PL) leads cybersecurity and information assurance for assigned Air Force or DoD information systems. The role oversees the full cybersecurity lifecycle and Authorization to Operate (ATO) package, ensuring compliance with the Risk Management Framework (RMF) and/or Joint Special Access Program Implementation Guide (JSIG). It also manages security plans, policies, procedures, access controls, security controls, continuous monitoring, audits, incident response, security awareness, threat and vulnerability evaluation, and security architecture documentation. The ISSM collaborates with engineering, IT, and other stakeholders to integrate security requirements into system architectures and operations, and prepares reports, briefings, and recommendations for leadership.

Requirements

Demonstrated experience managing cybersecurity and information assurance for Air Force or DoD information systems.
In-depth knowledge of RMF, JSIG, NIST 800-53, DoDI 8500.01, DoDM 8140.03, and other relevant standards.
Proficiency in security tools, vulnerability assessment, and incident response processes.
Strong analytical, organizational, and communication skills.
Ability to lead multidisciplinary teams and manage complex security projects.
Must be a U.S. citizen.
Must possess or be able to obtain and maintain a Top Secret clearance.
Either a master’s degree in Cybersecurity, Information Assurance, Computer Science, or a related field and at least 10 years of relevant experience; a bachelor’s degree in a related field and at least 18 years of relevant experience; or 12 years of relevant experience in lieu of a master’s degree.

Nice To Haves

Relevant professional certifications such as CISSP, CISM, or Security+ are highly desirable.

Responsibilities

Lead development, implementation, and maintenance of security plans, policies, and procedures aligned with federal mandates, DoD requirements, and Air Force directives.
Oversee the cybersecurity lifecycle and ATO package for assigned systems, ensuring compliance with RMF and/or JSIG requirements.
Manage user access and verify clearances, authorization, and need-to-know.
Oversee implementation and validation of security controls, conduct continuous monitoring, and maintain system security posture.
Coordinate and support external audits and incident response efforts, and translate security requirements into actionable guidance.
Oversee security awareness and training initiatives for system users.
Evaluate threats and vulnerabilities, ensure compliance with security regulations and Security Classification Guides, and support security architecture documentation.
Collaborate with engineers, IT professionals, and stakeholders to integrate security requirements into system architectures and operations.
Prepare and present reports, briefings, and recommendations to leadership and stakeholders.
Lead multidisciplinary teams and manage complex security projects.