ISSM (PL)

Key Responsibilities

• Lead the development, implementation, and maintenance of comprehensive security plans, policies, and procedures aligned with federal mandates (e.g., FISMA, NIST frameworks), DoD, and Air Force directives.
• Oversee the full cybersecurity lifecycle and Authorization to Operate (ATO) package for assigned systems, ensuring compliance with Risk Management Framework (RMF) and/or Joint Special Access Program Implementation Guide (JSIG) requirements.
• Manage user access, ensuring proper clearances, authorization, and need-to-know are verified.
• Oversee the implementation and validation of security controls, perform continuous monitoring activities, and maintain the system's security posture.
• Coordinate and support external audits, incident response efforts, and the translation of security requirements into actionable guidance.
• Provide oversight of security awareness and training initiatives for system users.
• Evaluate threats and vulnerabilities, ensure compliance with security regulations and Security Classification Guides (SCGs), and support the development of security architecture documentation.
• Collaborate with engineers, IT professionals, and stakeholders to ensure seamless integration of security requirements into system architectures and operations.
• Prepare and present reports, briefings, and recommendations to leadership and stakeholders.

Desired Skills & Qualifications

• Demonstrated experience managing cybersecurity and information assurance for Air Force or DoD information systems.
• In-depth knowledge of RMF, JSIG, NIST 800-53, DoDI 8500.01, DoDM 8140.03, and other relevant standards.
• Proficiency in security tools, vulnerability assessment, and incident response processes.
• Strong analytical, organizational, and communication skills.
• Ability to lead multidisciplinary teams and manage complex security projects.
• Relevant professional certifications (e.g., CISSP, CISM, Security+) are highly desirable.

Clearance and Education Requirements

• US Citizen
• Must possess or be able to obtain and maintain a Top Secret Clearance.
• Master’s degree in Cybersecurity, Information Assurance, Computer Science, or a related field and at least 10 years of relevant experience; OR
  • Bachelor’s degree in a related field and at least 18 years of relevant experience (substituting 8 years for the Master’s); OR
  • 12 years of relevant experience (in lieu of a Master’s degree)