Information Security Specialist

datasystemsanalystsinc; Augusta (GA); On-site; USD 120,000 - 180,000; Full time

Job summary

Data Systems Analysts, Inc. is seeking an experienced Information Security Specialist SME to assist as A-ISSM for Scalable GEOINT at Fort Gordon, GA. You will support RMF accreditation, build security policies, and coordinate with ISSOs and government leaders.

The role emphasizes DoD/Army/IC security requirements, including STIG/IAVM compliance, security controls, and continuous monitoring across Windows and RHEL environments.

Qualifications

• Bachelor's or master's degree in cybersecurity or related discipline, or equivalent experience.
• 10+ years in information security management with governance, compliance, and risk management.
• Subject matter expert in developing and overseeing security policies.
• Extensive experience supporting DoD RMF accreditation and security authorization processes.
• Strong knowledge of NIST SP 800-53 Rev 5, assessments, continuous monitoring, and POA&M management.
• Experience implementing DISA STIG and IAVM compliance across Windows, Windows Server, and RHEL.
• Experience with cybersecurity tools including Tanium, Splunk, Trellix/HBSS/AESS.
• Advanced certifications such as CISSP or CISM.
• Ability to meet DoD baseline certification requirements and obtain required computing environment certification before privileged access.

Responsibilities

• Support the ISSM in developing and overseeing security policies and procedures.
• Lead RMF activities, security authorization, continuous monitoring, and ATOs.
• Develop, assess, and monitor security controls per NIST SP 800-53 Rev 5 and requirements.
• Identify, assess, document, and mitigate cyber vulnerabilities and risks.
• Develop and maintain POA&Ms and remediation tracking.
• Ensure compliance with DISA STIGs and IAVM requirements.
• Oversee security across Windows, Windows Server, and RHEL environments.
• Support endpoint security, vulnerability management, and logging solutions (Tanium, Splunk).
• Coordinate access management and privileged access controls.
• Investigate and document security incidents and compliance deficiencies.
• Produce security documentation, contingency plans, and awareness materials.
• Collaborate with stakeholders for security assessments and accreditation.

Skills

RMF accreditation

NIST 800-53

Security policy

Tanium

Splunk

CISSP/CISM

DISA STIG

Continuous monitoring

Governance

Stakeholder comms

Education

Bachelor's or Master's in Cybersecurity

Tools

Tanium

Splunk

DISA STIG tools

IAVM

Job description

All hired employees are expected to have experience with Microsoft Copilot and / or an approved equivalent AI solution.

Position Overview

Data Systems Analysts, Inc. (DSA) is seeking an experienced Information Security Specialist Subject Matter Expert (SME) to serve as the Assistant Information System Security Manager (A-ISSM) supporting the Scalable GEOINT mission at Fort Gordon, GA.

In this role, you will help ensure classified intelligence systems remain secure, compliant, operational, and authorized to support critical Army and Intelligence Community missions.

The ideal candidate brings extensive experience in cybersecurity management, Risk Management Framework (RMF) accreditation, security policy development, and classified information system security. You will work closely with government security leadership, Information System Security Officers (ISSOs), system administrators, and Authorizing Officials to manage security risks and maintain compliance with Department of Defense (DoD), Army, and Intelligence Community requirements.

Key Responsibilities

• Support the Government Information System Security Manager (ISSM) in developing, implementing, and overseeing information system security policies and procedures.
• Lead and coordinate Risk Management Framework (RMF) activities, including security authorization, continuous monitoring, and maintaining Authorizations to Operate (ATOs).
• Develop, implement, assess, and monitor security controls in accordance with NIST SP 800-53 Revision 5 and applicable DoD, Army, and Intelligence Community requirements.
• Identify, assess, document, and mitigate cybersecurity vulnerabilities and risks.
• Develop and maintain Plans of Action and Milestones (POA&M), ensuring identified security deficiencies are tracked through remediation or resolution.
• Ensure compliance with Defense Information Systems Agency Security Technical Implementation Guides (DISA STIGs) and Information Assurance Vulnerability Management (IAVM) requirements.
• Oversee security compliance across Windows, Windows Server, and Red Hat Enterprise Linux (RHEL) environments.
• Support the implementation and management of endpoint security, vulnerability management, and logging solutions, including Tanium, Trellix/HBSS/AESS, and Splunk.
• Coordinate access management, account security, and privileged access controls.
• Investigate and document security incidents, violations, and potential compliance deficiencies.
• Develop and maintain security documentation, contingency plans, emergency procedures, and security awareness materials.
• Collaborate with government stakeholders, ISSOs, system administrators, external vendors, inspectors, and the Authorizing Official's chain throughout security assessments and accreditation activities.
• Provide subject matter expertise and technical guidance to ensure the continued security and operational readiness of classified GEOINT systems.

Required Qualifications

• Bachelor's or Master's degree in Cybersecurity, Information Security, or a related discipline, or equivalent professional experience.
• 10+ years of experience in information security management, including responsibility for cybersecurity governance, security compliance, and risk management.
• Demonstrated subject matter expertise in developing, implementing, and overseeing information security policies.
• Extensive hands-on experience supporting DoD Risk Management Framework (RMF) accreditation and security authorization processes.
• Strong working knowledge of NIST SP 800-53 Revision 5, security control assessments, continuous monitoring, and POA&M management.
• Experience implementing and maintaining DISA STIG and IAVM compliance across Windows, Windows Server, and RHEL environments.
• Experience with cybersecurity tools and technologies, including Tanium, Trellix/HBSS/AESS, and Splunk.
• Experience identifying, evaluating, documenting, and mitigating information system security risks.
• Strong communication, documentation, and stakeholder coordination skills.
• Advanced information security management certification, such as CISSP or CISM.
• Ability to meet DoDM 8140.03 baseline certification requirements for the assigned cybersecurity work role at the start of employment.
• Ability to obtain the required computing environment certification before receiving privileged access.

Preferred Qualifications

• Previous experience serving as an ISSM, Assistant ISSM, Deputy ISSM, or senior ISSO supporting classified DoD or Intelligence Community systems.
• Experience supporting DoDIIS, JWICS, or other classified intelligence information systems.
• Experience overseeing, mentoring, or coordinating teams of Information System Security Officers (ISSOs).
• Familiarity with cross-domain solutions, secure data transfer processes, and Public Key Infrastructure (PKI).
• Experience supporting Army intelligence, GEOINT, NGA, INSCOM, or similar national security programs.
• Additional advanced cybersecurity certifications, such as CCSP or CISSP-I