Information Systems Security Manager / Officer (ISSM / ISSO)

General Dynamics Information Technology; Ramstein-Miesenbach; Hybrid; USD 100.000 - 130.000; Vollzeit

Zusammenfassung

A leading technology services provider is seeking an Information Systems Security Manager to oversee the cybersecurity of mission-critical systems in Ramstein-Miesenbach, Germany. You will manage security policies, ensure compliance with frameworks like NIST, and conduct risk assessments. Candidates should have 8+ years of experience and a Top Secret clearance. This hybrid role offers opportunities for professional growth and comprehensive benefits.

Leistungen

401K with company match

Comprehensive health and wellness packages

Paid education and certifications

Paid vacation and holidays

Qualifikationen

• Minimum 8 years overall experience with 4 years in cybersecurity.
• Experience with Risk Management Framework (RMF) required.
• Ability to perform vulnerability assessments and remediation.

Aufgaben

• Manage secure development of USAFE-AFAFRICA systems.
• Serve as primary cybersecurity contact for specific systems.
• Prepare and submit System Security Plans (SSPs).

Kenntnisse

Risk Management Framework (RMF)

Cybersecurity principles

Vulnerability analysis

NIST 800-53 compliance

Ausbildung

8 years of overall experience

Clearance: Top Secret

DoDD 8570.01M certification

Tools

eMASS

STIG Viewer

SCAP

Jobbeschreibung

Information Systems Security Manager / Officer (ISSM / ISSO)

Transform technology into opportunity as an Information Security Analyst Advisor with GDIT. A career in enterprise IT means connecting and enhancing the systems that matter most. At GDIT, you’ll be at the forefront of innovation, playing a meaningful role in improving how agencies operate.

At GDIT, people are our differentiator. As an Information Security Analyst Advisor, you will help ensure today is secure and tomorrow is smarter. Our mission depends on a dedicated professional who can perform the procedures necessary to safeguard information system assets and protect them from intentional or inadvertent access or destruction. You'll monitor, evaluate, and maintain the systems and procedures that protect internal information systems, networks, databases, and web-based environments.

Are you a cybersecurity professional with a strong foundation in risk management and security compliance? GDIT is seeking a skilled candidate with ISSO or ISSM experience to support the cybersecurity posture of mission-critical systems. In this hybrid role, you will manage cybersecurity policies, assess risk, and ensure compliance with frameworks such as NIST 800-53 and the Risk Management Framework (RMF). Whether you’re looking to advance your career or take on greater responsibilities, this is an opportunity to contribute to a high-impact program in a collaborative, mission-driven environment.

HOW AN INFORMATION SECURITY ANALYST ADVISOR WILL MAKE AN IMPACT

• Manage the secure development and authorization of new USAFE-AFAFRICA systems, from inception to full operational capability, leveraging NIST security frameworks.
  
• Serve as the primary cybersecurity point of contact for USAFE-AFAFRICA systems, ensuring compliance with security policies, procedures, and regulations while providing timely updates on threats, risks, and authorization status to stakeholders.
  
• Perform all necessary procedures to protect information system assets, including overseeing the accreditation and certification of USAFE-AFAFRICA systems in accordance with DoD, Intelligence Community, and agency-specific requirements.
  
• Prepare and submit System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and risk assessment documentation; collaborate with Authorizing Officials (AOs) to achieve and maintain Authorization to Operate (ATO) status.
  
• Conduct regular reviews of DISA STIGs, analyze ACAS vulnerability scans, and provide remediation feedback to maintain compliance and support continuous monitoring under RMF.
  
• Develop and recommend policies and procedures to ensure information system reliability, availability, and security; perform security evaluations, audits, and reviews to identify vulnerabilities and mitigate risks.
  
• Create and maintain RMF control family documentation and ensure adherence to established procedures.
  
• Recommend and implement training programs to educate users on cybersecurity policies and procedures; participate in network and system design to ensure appropriate security controls are integrated from the start.
  
• Ensure the rigorous application of information security policies, principles, and practices across all IT services. Perform ISSM duties as defined in AFMAN 17-101 and DoDI 8510.01 for assigned systems and applications.
  
• Stay current with applicable DoD and NIST RMF publications, including NIST 800-53, 800-60, 800-37, and DoDI 8540.01.

Required Experience

• A minimum of 8 years of overall experience, with at least 4 years of specialized experience in:
  
  • Defining computer security requirements for high-level applications
    
  • Evaluating approved security product capabilities
    
  • Identifying and resolving computer security issues
    
• Extensive experience with the Risk Management Framework (RMF) and hands-on use of eMASS
  
• Proven ability to review and analyze Assured Compliance Assessment Solution (ACAS) vulnerability scan results, validate findings, and support remediation efforts
  
• Proficiency with Security Technical Implementation Guides (STIGs) and associated automation tools such as:
  
  • SCAP
    
  • STIG Viewer
    
  • eMASSter
    
• Strong technical foundation with familiarity in:
  
  • Virtualization technologies
    
  • Basic networking concepts
    
  • Cloud architecture and implementation
    
  • Industry cybersecurity best practices
    
• Expert-level knowledge of cybersecurity principles, tools, and practices
  
• In-depth understanding of Federal and DoD cybersecurity regulations and policies
  

Location: On Customer Site

US Citizenship Required

DoDD 8570.01M Information Assurance Manager level III baseline certification required.

TESA eligibility/certification required.

Clearance: Top Secret

#DefenseOCONUS

GDIT IS YOUR PLACE:

● 401K with company match
● Comprehensive health and wellness packages
�� Internal mobility team dedicated to helping you own your career
● Professional growth opportunities including paid education and certifications
● Cutting-edge technology you can learn from
● Rest and recharge with paid vacation and holidays