Information System Security Manager

Bering Straits Native Corporation; Anchorage (AK); On-site; USD 90,000 - 130,000; Full time

Job summary

Arcticom, LLC is seeking a senior cybersecurity professional to serve as the ISSM for complex programs in Anchorage. You will lead RMF activities, oversee authorization and continuous monitoring, and coordinate with DoD stakeholders to ensure secure configurations and compliance.

The role requires 7–10 years in cybersecurity with 5+ in ISSM/senior security, active Secret clearance, and CISSP or equivalent certification.

Qualifications

• Bachelor's degree in Cybersecurity/IT or related field.
• 7–10 years cybersecurity experience, including 5+ years in ISSM or senior security role.
• Active Secret clearance is required.
• CISSP or equivalent certification required.
• CASP+ or CISM preferred.
• Experience with NIST 800-53, RMF, and DoD cybersecurity policies.

Responsibilities

• Serve as the ISSM and primary authority for multiple classified and unclassified systems.
• Lead RMF lifecycle across assigned systems.
• Oversee continuous monitoring, including log analysis and vulnerability management.
• Act as liaison with Authorizing Officials and stakeholders.
• Lead A&A activities and documentation; manage POA&M and risk mitigation.
• Conduct security reviews, audits, and inspections.
• Advise leadership on cybersecurity risks and strategies.

Skills

RMF lifecycle

Security leadership

Risk management

NIST 800-53

Windows/Linux

Vulnerability tools

DoD policies

Communication skills

Education

Bachelor's degree in Cybersecurity/IT

Master's preferred

Tools

eMASS

Splunk

Xacta

Job description

About Arcticom, LLC

Arcticom, LLC provides network and systems administration, enterprise architecture and resource planning, certification and accreditation, software design, programming, maintenance of telecommunications and land mobile radio equipment and systems, help desk support and IT transformation services among other services.

About this position

Location - Anchorage, AK

Applicants will be notified via phone or email within ten (10) business days of submittal.

Essential Duties & Responsibilities

The Essential Duties and Responsibilities are intended to present a descriptive list of the range of duties performed for this position and are not intended to reflect all duties performed within the job. Other duties may be assigned. To perform this job successfully, an individual must be able to satisfactorily perform each essential duty. The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions of the position.

• Serve as the ISSM and primary authority for multiple classified and unclassified systems.
• Provide strategic oversight and direction for system security programs.
• Lead and manage RMF lifecycle across assigned systems.
• Oversee continuous monitoring including log analysis, vulnerability management, and compliance.
• Act as liaison with Authorizing Officials (AOs) and stakeholders.
• Lead Assessment & Authorization (A&A) activities and documentation.
• Direct POA&M management and risk mitigation.
• Conduct and lead security reviews, audits, and inspections.
• Provide architectural guidance for secure system design.
• Advise leadership on cybersecurity risks and strategies.
• Establish configuration management and change control processes.
• Lead collaboration across engineering and operations teams.
• Support audits and compliance engagements.
• Mentor NOC support personnel.

Required (Minimum Necessary) Qualifications

• Education Requirements: Bachelor's degree in Cybersecurity, IT, or related field (Master's preferred)
• Level of Experience Requirements: 7-10 years cybersecurity experience, including 5+ years in an ISSM or senior security role.

Knowledge, Skills, Abilities, and Other Characteristics

• Experience managing RMF processes for complex systems.
• Active Secret clearance required.
• Ability to obtain TS/SCI if needed.
• CISSP or equivalent advanced cybersecurity certification required.
• CASP+, CISM, or similar preferred.
• Expert knowledge of NIST 800-53, RMF and DoD cybersecurity policies.
• Experience with Windows/Linux, vulnerability management tools, and enterprise security architecture.
• Strong leadership, communication, and risk management skills.

Preferred

• Master's degree in Cybersecurity, IT, or related field
• Experience in DevSecOps, R&D, or large DoD programs.
• Familiarity with tools such as eMASS, Splunk, or Xacta.
• Prior leadership experience.

Supervisory Responsibilities

This position will have supervisory responsibilities.

DOT Covered/Safety-Sensitive Role Requirements

This position is not subject to federal requirements regarding Department of Transportation "safety-sensitive" functions.

Necessary Physical Requirements

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this role. Employees must always maintain a constant state of mental alertness. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. Office or secure facility environment with possible travel.

Work Environment

The work environmental characteristics described here are representative of those that must be borne by an employee to successfully perform the essential functions of the role. Employees must always maintain a constant state of situational awareness. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

Shareholder Preference

BSNC gives hiring, promotion, training, and retention preference to BSNC shareholders, shareholder descendants and shareholder spouses who meet the minimum qualifications for the job.

Bering Straits Native Corporation is an equal opportunity employer. All applicants will receive consideration for employment without regard to any status protected by state or federal law, or any other basis prohibited by law.