Information System Security Manager (ISSM)

Ddc Dine; Patterson (CA); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical, dental, vision

Life and disability insurance

Retirement with company match

Paid time off

Tuition reimbursement

Employee assistance program

Job summary

Diné Development Corporation (DDC) seeks an Information System Security Manager (ISSM) to support a U.S. Air Force program. You will create system security plans, make cyber risk decisions, and conduct audits on NIPR systems from Wright Patterson AFB.

The role requires active secret clearance and 8+ years in cybersecurity, with RMF and DoD policy experience. You will lead SSP development, accreditation activities, and work with a multi-contractor team on continuous monitoring and compliance.

Qualifications

• Active Secret Clearance required with DoD experience.
• BS in Computer Science, Cyber Security, or related field.
• 8+ years of cybersecurity experience with RMF guidance.
• One of CASP+, CISSP, CISSP Associate, or GSLC preferred.
• Experience with DoD/AF RMF, ITIPS, and auditing processes.

Responsibilities

• Develops, implements, and maintains data strategies for quality and accessibility.
• Defines architecture standards, reference architectures, processes, and data governance.
• Ensure unclassified systems comply with DoD/government regulations within accreditation.
• Lead SSP development, accreditation/re-accreditation, and compliance reviews.
• Collaborate with cybersecurity lead; be primary contact for inspections and tests.
• Support continuous monitoring, RMF, and emerging compliance requirements.

Skills

Active Secret Clearance

8+ years cybersecurity

RMF knowledge

NIST 800-53 Rev4/5

DevSecOps security testing

FISMA awareness

Risk assessment & mitigation

Education

BS in Computer Science or Cyber Security

Tools

ACAS

Splunk

eMASS

ITIPS

STIG reviews

Job description

## Information System Security Manager (ISSM)Apply: Wright Patterson: Full time: Posted Yesterday: JR100311Dine Source is seeking an **ISSM** to support an Air Force program. We are seeking a motivated cybersecurity professional to join our Cyber team. As a member of our team, you'll create system security plans, make cyber risk decisions, and conduct audits on NIPR systems.**\\*This position is contingent upon contract award.\\*****Responsibilities:*** Develops, implements, and maintains data strategies to ensure quality and accessibility* Develops/maintains the definition and documentation of architectural standards, reference architectures processes, operating models, and logical and physical data/associated data management resources* Ensure unclassified systems follow DoD and government regulations while still meeting program demands and operating in an accredited state.* Lead all aspects of SSP development, maintenance, accreditation/re-accreditation, and oversight, including conducting periodic reviews to ensure compliance.* Work with cybersecurity lead and be a primary contact for IS security inspections, tests, and reviews by oversight authorities.* Other duties as assigned.**Qualifications**:* Must have an active Secret Clearance* Have acquired a BS in Computer Science, Cyber Security, or a related field; with 8+years of relevant cybersecurity experience;* ***Must have one of the following current certifications: CASP+, CISSP, CISSP Associate, or GSLC.**** Have 3+ years working with the Air Force RMF security frameworks, including DoD and Air Force security policies and instructions.* Must have the experience and the ability to provide tactical information security advice and manage all Cybersecurity related activities for current or future IT platforms* Must work in conjunction with a multi-contractor team in support of Cybersecurity, continuous monitoring, and other emerging compliance requirements.* Must ensure Federal Information Security Management Act (FISMA) requirements are being met and track in the Air Force’s Information Technology Investment Portfolio Suite (ITIPS).* Must ensure that software, hardware, and firmware comply with appropriate IAVM’s.* Must track and action POA&M entries as part of the RMF process.* Experience is required for reviewing and updating STIG results.* Must ensure Continuous Monitoring is adhered to.* Must have working experience with Risk Management Framework and NIST 800-53 revision 4 and revision 5 controls* Must have experience working within eMASS and obtaining an ATO* Must be familiar with performing Security validation testing through a DevSecOps process and within both on-premises and a Cloud Environment* Mush have experience with ACAS, utilizing Splunk, reviewing of audit logs, and other cybersecurity monitoring functions* Ability to identify risks of implementing technology solutions and analyze the impact on achieving desired business outcomes**About Us** Diné Development Corporation (DDC) is a Navajo Nation owned family of companies that provides government agencies and commercial organizations with high-quality IT, professional, environmental, and research and development services. DDC is dedicated to empowering the Navajo Nation and communities we serve.**Benefits** Eligible full-time employees receive a comprehensive benefits package, including medical, dental, vision, life and disability coverage, retirement savings with company match, paid time off, voluntary supplemental benefits, and access to an employee assistance program. The package also includes educational assistance, with tuition reimbursement.