Information System Security Manager (ISSM)

Information System Security Manager (ISSM)

Nammo Perry is the center of excellence for the design, development and production of munitions and pyrotechnic products for the U.S. Department of Defense. Nammo employees working at the Florida site manufacture all types of 40mm low and high velocity ammunition; pyrotechnic marking; signaling and tactical illumination devices; battlefield effects training simulators; demolition charges; hand grenade fuzes; and other ammunition components. Additionally, they provide load, assemble, and pack (LAP) services for large caliber direct-fire ammunition.

Unique Benefits Designed with Care:

• Monday - Thursday work week working 10-hour days
• 401(K) with a 6% company match
• 100% Employer-Paid Employee Only Medical Plan Option
• Employer Health Saving Account Contributions
• Generous PTO and nine paid holidays

Job Position:

The Information Systems Security Manager (ISSM) is responsible for protecting the organization's information, networks, systems, and computing resources from security threats and for maintaining the cybersecurity and Risk Management Framework (RMF) posture of classified programs in accordance with applicable government directives, customer requirements, and program requirements. The ISSM coordinates with program and project stakeholders, Information Assurance (IA) personnel, the Facility Security Officer (FSO), Contractor Program Security Officers (CPSOs), and IT and Security teams to establish, implement, monitor, and maintain information systems security policies, procedures, and controls, including configuration change-management standards.

Key Responsibilities:

• Develop, implement, maintain, and review information systems security policies, procedures, and plans in accordance with applicable requirements
• Coordinate with program and project stakeholders, IA staff, the FSO, CPSOs, and IT and Security personnel to define, implement, and maintain an acceptable information systems security posture
• Lead or support RMF activities for classified information systems
• Implement and oversee the Information Assurance (IA) program for assigned systems
• Identify vulnerabilities, threats, and potential security risks
• Oversee or coordinate investigations into information security incidents and suspected security breaches
• Perform continuous monitoring of information systems
• Verify that workstations, servers, network devices, peripherals, and other system components remain configured and operated in accordance with their approved security posture and authorization conditions
• Assess and audit the security configuration and compliance of Windows and Linux operating systems, virtualization environments, network devices, and related infrastructure
• Develop and maintain disaster recovery and system-restoration plans
• Provide cybersecurity and information assurance guidance, communicate security responsibilities, and educate personnel on applicable security policies and cybersecurity best practices
• Coordinate with relevant stakeholders to maintain required security documentation, address assessment findings, and support audits, inspections, and customer or government reviews
• Perform other job-related duties as assigned

Knowledge, Skills, and Abilities:

• Working knowledge of 32 CFR Part 117 / NISPOM, DAAPM, ICD 503, JSIG, NIST RMF, and STIG requirements relevant to assigned systems
• Experience with information systems security administration, system authorization or certification, compliance auditing, and security assessment activities
• Experience evaluating and auditing Windows and Linux systems, virtualization platforms, network devices, and peripherals
• Ability to identify security risks, analyze technical and procedural issues, develop practical mitigations, and follow corrective actions through completion
• Strong written and verbal communication skills, including the ability to coordinate across technical teams, security personnel, program stakeholders, and management

Minimum Qualifications:

• At least two (2) years of experience serving as an ISSM or Information Systems Security Officer (ISSO), implementing NISPOM, DAAPM, and ICD 503 requirements
• Experience with configuration, certification/authorization, auditing, or compliance analysis of Windows and Linux operating systems, virtualization, network devices, and related systems
• DoD 8570 Information Assurance Management (IAM) Level III certification, such as CISA, CISM, or CISSP, or an applicable successor certification accepted for the position
• Active DoD Secret security clearance and U.S. citizenship

Our values are the fundamental principles guiding the way we do business and interact with stakeholders.

Dedication: We are enthusiastic and creative, always searching for the best solutions. Precision: We are reliable and accurate in our technology, processes and business. Care: We are inclusive and open-minded, always encouraging team spirit and cooperation.

Nammo and its subsidiaries provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

**Note**: Due to US Export Control laws and regulations; applicants selected for employment must show proof of a U.S. Person status before employment may begin.