Information System Security Manager

Fidelity Partners Services; San Antonio (TX); In loco; USD 76.000 - 108.000; Tempo pieno

Descrizione del lavoro

Fidelity Partners is seeking an Information System Security Manager (ISSM) for the San Antonio, TX area to lead cybersecurity RMF support for DoD enclave systems. The position is on-site with potential for light travel and after-hours support as needed.

Requirements include a BS in IT or Cybersecurity, 5+ years RMF/cybersecurity experience, current Security+ certification, and a Secret clearance is highly desired. Employment is full-time with a base period and possible extension.

Competenze

• Bachelor's degree in IT or Cybersecurity.
• At least five years RMF/cybersecurity experience with no more than a three-year lapse.
• Current CompTIA Security+ certification.
• Meet DoD 8140.03 requirements for the labor category.
• Execute nondisclosure agreement before start.
• Current Secret clearance is highly desired and may be required for certain duties.

Mansioni

• Perform ISSM and DoD 8140 work role 722 responsibilities for classified and unclassified systems.
• Validate certifications and training before elevated access.
• Administer privileged-access agreements and audit privileged accounts.
• Advise management on risk, security posture, vulnerabilities, mitigations.
• Coordinate RMF, ATO, eMASS, STIG, vulnerabilities, audits, and documentation.
• Maintain system security plans, risk reports, and RMF artifacts.
• Use scanning tools to identify vulnerabilities and maintain remediation plans.
• Support audits, inspections, and cybersecurity reporting.
• Provide cybersecurity consulting and customer support to stakeholders.

Conoscenze

RMF cybersecurity

CompTIA Security+

Cybersecurity governance

Formazione

Bachelor of Science in IT or Cybersecurity

DoD 8140.03 education/training/certification requirements

Descrizione del lavoro

Information System Security Manager ISSM - San Antonio, Texas

This Position Is Contingent Upon Contract Award

Work Location

Department of the Air Force

Air Force Research Laboratory - 711th Human Performance Wing

Tri-Service Research Laboratory, Building 3260

Joint Base San Antonio-Fort Sam Houston, San Antonio, TX

Position Details

• Number of Positions: One full-time position (1.0 FTE; approximately 1,880 priced hours for the base year).


• Estimated Total Compensation: $66.44 per hour.


• Customer: Air Force Research Laboratory (AFRL), 711th Human Performance Wing, Bioeffects Division.


• Type of Employment: Full-time.


• Working Hours: Normally Monday through Friday between 7:00 AM and 5:00 PM, not to exceed 40 hours per week. After-hours support may be required for specific tasks.


• Work Arrangement: Primarily on-site at the Tri-Service Research Laboratory. Temporary alternate work locations may be assigned by the COR; general telework authorization is not specified.


• Period of Performance: Base period from November 30, 2026 through November 29, 2027, with a possible extension under FAR 52.217-8.


• Citizenship and Access: U.S. citizenship is required for contractor personnel requiring access to USAF bases, AFRL facilities, or Government IT networks unless a written waiver is approved by the Contracting Officer.


• Security Requirements: A current Secret clearance is highly desired. A Secret clearance is required for personnel who need classified-information or IT-II access; the highest classification level is Secret.


• Travel: No travel is anticipated. Any required travel would be added by separate bilateral modification.

Summary Of Services

The Information System Security Manager will lead cybersecurity and RMF support for NIPRNet, DREN, RDTE, SIPRNet, and standalone enclaves and systems supporting the Tri-Service Research Laboratory. The role performs DoD 8140 work role 722 functions and provides enterprise risk, authorization, compliance, vulnerability-management, access-control, audit, and advisory support.

Mandatory Qualifications

• Must possess a Bachelor of Science degree in Information Technology or Cybersecurity.


• Must have at least five years of demonstrated RMF and cybersecurity experience, with no more than a three-consecutive-year lapse in cyberspace work.


• Must maintain a current, valid CompTIA Security+ certification.


• Must meet applicable DoD Manual 8140.03 education, training, certification, and intermediate-level work-role requirements for the assigned labor category.


• Must execute a nondisclosure agreement before the start of performance.


• A current Secret clearance is highly desired and may be required before performing duties involving classified information, SIPRNet, or IT-II access.

Duties And Responsibilities

• Perform ISSM and DoD 8140 work role 722 responsibilities for assigned classified and unclassified systems and enclaves.


• Validate that administrative and technical personnel meet required baseline certifications and training before receiving elevated access.


• Administer privileged-access agreements and conduct recurring audits of privileged accounts.


• Advise senior management and the Authorizing Official regarding risk levels, security posture, vulnerabilities, mitigations, and changes affecting cybersecurity posture.


• Direct and coordinate enterprise RMF, ATO, eMASS, STIG, vulnerability-management, audit, inspection, documentation, access-control, and remediation activities.


• Administer, coordinate, and track compliance with TSRL enterprise cybersecurity architecture, strategy, plans, policy, and Risk Management Framework requirements.


• Maintain valid Authorizations to Operate, current eMASS packages, security controls, assessment procedures, plans of action and milestones, and required RMF artifacts.


• Prepare and maintain system security plans, assessment reports, risk reports, topology diagrams, hardware/software inventories, standard operating procedures, and related evidence packages.


• Use ACAS or other approved scanning tools to identify and assess vulnerabilities and maintain STIG checklists and documented remediation plans.


• Support audits, inspections, configuration-management reviews, vulnerability assessments, cloud-security activities, and cybersecurity reporting.


• Coordinate account onboarding and offboarding, DD Form 2875 workflows, workforce qualification tracking, user training, media destruction, agreements, and classified-media handling as assigned.


• Provide cybersecurity consulting and customer support, participate in the AFRL Cybersecurity Working Group, prepare meeting minutes and action tracking, and brief Government and industry stakeholders.


• Support cybersecurity pilot projects, Inspector General activities, documentation development, system discovery, and implementation of compliant technical solutions.


• Protect classified, controlled, proprietary, and sensitive information and comply with OPSEC, security, public-release, network-access, and facility requirements.


• Duties and responsibilities are subject to change if work schedules, locations, and/or priorities change based on Government or program needs.

Required Candidate Submission Documents

• Resume not exceeding five pages and documenting the required five years of RMF/cybersecurity experience.


• Copy of qualifying bachelor's degree and current Security+ certification.


• Evidence of applicable DoD 8140.03 work-role qualifications and current Secret clearance, if held.


• Wet-signed Letter of Intent.


• Signed nondisclosure agreement by the start of performance and any security, identity, CAC, network-access, training, or onboarding documents requested by Fidelity Partners or the Government/client.

About Us

Fidelity Partners is an Inc. 5000 USA company that provides medical, technical, logistical, and administrative services to the federal government and commercial clients across the country. Fidelity offers competitive salaries and benefits packages.

Fidelity Partners provides equal employment opportunities without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected in accordance with applicable federal, state, and local laws (EOE).