Information System Security Manager (ISSM) (PL)

Canvas · Niceville

Lead the development, implementation, and maintenance of comprehensive security plans, policies, and procedures aligned with federal mandates (e.g., FISMA, NIST frameworks), DoD, and Air Force directives.
Oversee the full cybersecurity lifecycle and Authorization to Operate (ATO) package for assigned systems, ensuring compliance with Risk Management Framework (RMF) and/or Joint Special Access Program Implementation Guide (JSIG) requirements.
Manage user access, ensuring proper clearances, authorization, and need-to-know are verified.
Oversee the implementation and validation of security controls, perform continuous monitoring activities, and maintain the system's security posture.
Coordinate and support external audits, incident response efforts, and the translation of security requirements into actionable guidance.
Provide oversight of security awareness and training initiatives for system users.
Evaluate threats and vulnerabilities, ensure compliance with security regulations and Security Classification Guides (SCGs), and support the development of security architecture documentation.
Collaborate with engineers, IT professionals, and stakeholders to ensure seamless integration of security requirements into system architectures and operations.
Prepare and present reports, briefings, and recommendations to leadership and stakeholders.

Demonstrated experience managing cybersecurity and information assurance for Air Force or DoD information systems.
In-depth knowledge of RMF, JSIG, NIST 800-53, DoDI 8500.01, DoDM 8140.03, and other relevant standards.
Proficiency in security tools, vulnerability assessment, and incident response processes.
Strong analytical, organizational, and communication skills.
Ability to lead multidisciplinary teams and manage complex security projects.
Relevant professional certifications (e.g., CISSP, CISM, Security+) are highly desirable.

US Citizen
Must possess or be able to obtain and maintain a Top Secret Clearance.
Master’s degree in Cybersecurity, Information Assurance, Computer Science, or a related field and at least 10 years of relevant experience; OR
- Bachelor’s degree in a related field and at least 18 years of relevant experience (substituting 8 years for the Master’s); OR
- 12 years of relevant experience (in lieu of a Master’s degree)