Information System Security Manager (ISSM)

Job Description

Job Description

JOB SUMMARY

Specialty Systems, Inc. has an opening for an Information System Security Manager (ISSM) with the below described skills and experience to join our team of technical professionals supporting our Department of Defense customer at the Joint Base MDL. In this position, you will have a high-profile role supporting and overseeing cybersecurity activities during the development and qualification of systems used for the support of unique Department of Defense systems.

This role involves supporting the delivery of comprehensive cyber, IT and support services to ensure mission success while adhering to DoD standards and regulations. The ISSM will oversee the cybersecurity posture of DoD information systems, ensuring compliance with DoD security standards and protecting sensitive data. The ISSM will develop and implement security policies, conduct risk assessments, manage system accreditations (RMF), and lead continuous monitoring efforts. This role requires collaboration with cross-functional teams and program stakeholders to enforce security controls and manage continuous monitoring.

This position requires strong expertise in the Risk Management Framework (RMF), defense cybersecurity standards, COMSEC, and technical skills in complex, mission-critical environments. The role is responsible for maintaining the security of the systems and infrastructure, serving as the facility Information Systems Security Manager (ISSM), and providing expert advice on confidentiality, integrity, and availability.

As a member of our team, you will be able to experience the professional satisfaction of playing a key role in ensuring that our Department of Defense customers’ systems that have a direct impact on our country’s warfighting and peace-keeping capabilities are performing at optimal levels.

This position is located at our customer site at Joint Base MDL. In this position, you will work our customer’s Compressed Work Schedule which consists of working four 9hour days (M-Th) and an 8-hour day (F) for the first week of a cycle followed by four 9-hour days (M-Th) and being off on the second Friday for the second week of a cycle. This results in a 3-day weekend every other week!

Responsibilities

• Provide technical leadership and management of a team of cybersecurity engineers, analysts, and information assurance personnel.

• Serve as the program’s Subject Matter Expert (SME) for DoD, DoN, and DISA cybersecurity policies, requirements, and compliance activities.
• Develop, implement, and maintain cybersecurity strategies supporting networked systems and System of Systems architectures deployed at USN and USMC installations.
• Guide contractor teams in the implementation of cybersecurity requirements throughout system design, development, integration, testing, deployment, and sustainment activities.
• Lead Risk Management Framework (RMF) activities, including preparation, review, and maintenance of accreditation and Authorization to Operate (ATO) packages.
• Review system architectures, interface designs, and engineering documentation to ensure cybersecurity requirements are incorporated into all system lifecycle phases.
• Coordinate vulnerability assessments, security testing, remediation efforts, and cybersecurity readiness reviews.
• Monitor cybersecurity risks and develop mitigation plans to ensure compliance with government requirements and mission objectives.
• Interface with Government program managers, engineers, Authorizing Officials, Security Control Assessors, and other stakeholders to resolve cybersecurity issues.
• Provide technical guidance regarding NIST controls, DISA STIG implementation, cybersecurity engineering, boundary protection, and secure network design.
• Prepare cybersecurity status reports, risk assessments, briefings, and recommendations for senior Government and contractor leadership.
• Support cybersecurity audits, inspections, and compliance reviews conducted by Government agencies.
• Develop and maintain cybersecurity documentation, policies, procedures, plans, and artifacts required for program execution.
• Prepare and deliver presentations to Government and contractor audiences, including program-level or large stakeholder groups.
• Skilled in the use of Microsoft Office applications (Word, Excel, PowerPoint, and Teams).
• Travel could be up to 25% of the time.

 

Qualification Requirements:

• A Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field with 10+ years of cybersecurity experience, including 5+ years supporting DoD or Department of the Navy (DoN) programs OR  Master’s degree in Cybersecurity, Information Assurance, Engineering, or related field with 8+ years of relevant experience OR Military Service School, technical certification(s), and 15+ years of demonstrated experience in cybersecurity, information assurance, network engineering, and DoD system accreditation activities.

• Must have an active Secret level or higher clearance.
• Experience supporting cybersecurity compliance activities during the development, integration, accreditation, and sustainment of networked Systems of Systems (SoS) and enterprise information technology environments is highly desired.

Desired Technical: 

• Navy Marine Corps Intranet (NMCI), Marine Corps Enterprise Network (MCEN), or other Navy/Marine Corps operational networks.

• System of Systems engineering and integration.
• Secure cloud, hybrid-cloud, and tactical network environments.
• Cybersecurity support to major acquisition programs and DoD acquisition lifecycle processes.
• Vulnerability management tools, security monitoring platforms, and continuous monitoring programs.
• Zero Trust implementation and cybersecurity architecture development.

• Preferred certifications include one or more of the following: CISSP, CASP+, CISM, GSLC, or equivalent DoD 8140/8570-compliant certification.

Security Clearance Notice:

• Applicants selected must have a U.S. Government security clearance of secret level or higher and must meet eligibility requirements for access to classified information. Due to the nature of work performed within our facilities, U.S. citizenship is required.

Specialty Systems, Inc. provides equal employment opportunity (EEO) to all employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability status, genetic information, marital status, ancestry, protected veteran status, or any other characteristic protected by applicable federal, state, and local laws and offers equal opportunity for VEVRAA Protected Veterans. Specialty Systems, Inc. will not discriminate against employees and job applicants who inquire about, discuss, or disclose compensation information.

 

Reasonable accommodation that does not cause an undue hardship on the company may be made to enable individuals with disabilities to perform essential functions, as long as that would not hinder or prevent performance of duties or be of a safety concern.

PHYSICAL DEMANDS:

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of the job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

 

While performing the duties of this job, the employee is required to reach with hands and arms. The employee is frequently required to sit, stand and walk. The employee may be required to move ten pounds and could occasionally lift or move up to twenty-five pounds.