Information System Security Manager (ISSM)

ProSource360 Consulting Services, Inc; San Antonio (TX); Vor Ort; USD 140.000 - 190.000; Vollzeit

Benefits dieser Stelle

Medical benefits

Dental benefits

Vision benefits

401(k)

Paid time off

Zusammenfassung

ProSource360 Consulting Services, Inc. is seeking an Information System Security Manager (ISSM) to serve as the senior cybersecurity lead for the Tri-Service Research Laboratory (TSRL).

The ISSM oversees RMF implementation, ATO maintenance, and cybersecurity compliance across DoD networks and standalone systems. The role provides technical guidance to personnel and advises senior leadership on cybersecurity risk, helping ensure systems meet DoD and federal security requirements, including SECRET

Qualifikationen

• Bachelor's degree in Information Technology or Cybersecurity; degree or transcript required.
• Five+ years of RMF experience and cybersecurity services.
• No more than three consecutive years lapse in cyberspace work.
• Current, valid CompTIA Security+ certification; expiration date to be provided.
• DoD 8140 work role 722 (ISSM) certifications meeting DoDM 8140.03 requirements.
• Demonstrated intermediate cybersecurity work-role experience.
• Active SECRET clearance preferred due to SIPRNet duties.

Aufgaben

• Lead RMF activities and support ATOs per NIST SP 800-53 Rev. 5, CNSSI 1253, DoDI 8510.01.
• Administer and track systems and enclaves in eMASS; maintain RMF package repositories and ATO docs within three business days.
• Prepare, review, and maintain SSPs, SARs, POA&Ms, risk assessments, topology diagrams, inventories, and procedures.
• Oversee vulnerability assessment and remediation using ACAS or approved tools; track corrective actions.
• Coordinate STIG hardening, IAVM reporting/compliance, configuration reviews, audits, and IG activities.
• Ensure personnel meet SECRET clearance and training requirements before elevated access.
• Administer Privileged Access agreements and audit privileged accounts.
• Advise senior management on cybersecurity risk and mitigations.
• Ensure cybersecurity training completion and support onboarding/offboarding (DD-2875).
• Support cybersecurity working groups, metrics, and briefings for senior leaders.

Kenntnisse

RMF experience

eMASS package management

ACAS & STIG compliance

IAVM processes

Senior leadership briefing

Risk assessment

Ausbildung

Bachelor of Science in Information Technology or Cybersecurity

Tools

eMASS

ACAS

STIGs

IAVM

Jobbeschreibung

Job Description

ProSource360 Consulting Services, Inc. is seeking an Information System Security Manager (ISSM) to serve as the senior cybersecurity lead for the Tri-Service Research Laboratory (TSRL). The ISSM oversees Risk Management Framework (RMF) implementation, Authority to Operate (ATO) maintenance, cybersecurity compliance, and security posture across NIPRNet, DREN, RDT&E, SIPRNet, and standalone systems and enclaves. The role provides technical and policy guidance to personnel, advises senior leadership and the Authorizing Official on cybersecurity risk, and helps ensure systems meet applicable DoD and federal security requirements.

Responsibilities

• Lead and coordinate RMF activities and support the granting and continued validity of ATOs in accordance with NIST SP 800-53 Rev. 5, CNSSI 1253, DoDI 8510.01, and related directives.
• Administer and track systems and enclaves in eMASS; maintain RMF package repositories and upload changes to ATO documentation within three business days.
• Prepare, review, and maintain System Security Plans, Security Assessment Reports, Plans of Action and Milestones (POA&Ms), risk assessments, topology diagrams, hardware/software inventories, and security procedures.
• Oversee vulnerability assessment and remediation activities using ACAS or other Air Force-approved tools; interpret findings and track corrective actions.
• Coordinate Security Technical Implementation Guide (STIG) hardening, Information Assurance Vulnerability Management (IAVM) reporting and compliance, configuration management reviews, audits, inspections, and Inspector General activities.
• Validate that administrative and technical personnel meet applicable DoD 8140 baseline certification and training requirements before elevated access is granted.
• Administer signed Privileged Access Agreements and conduct recurring audits of privileged accounts.
• Advise senior management and the Authorizing Official on cybersecurity risks, system security posture, and recommended mitigation actions.
• Ensure required cybersecurity training is completed and support account onboarding/offboarding, including DD Form 2875 routing.
• Support cybersecurity working groups, prepare metrics and briefings, and communicate cybersecurity matters to senior leaders and stakeholders.
• Support cloud cybersecurity strategy and enterprise IT pilot initiatives, including virtualization, collaboration systems, mobile technologies, cloud services, and automation.
• Coordinate quarterly media destruction and, when required, courier classified equipment or media within TSRL in accordance with security procedures.
• Assist with Memoranda of Agreement (MOAs), Memoranda of Understanding (MOUs), and Area of Responsibility (AOR) letters supporting the RMF Accreditation Program

Requirements

Required

• Bachelor of Science degree in Information Technology or Cybersecurity. A copy of the degree or transcript must be provided.
• At least five (5) years of demonstrated experience working with RMF requirements and providing cybersecurity services.
• No more than three (3) consecutive years of lapse in cyberspace work.
• Current, valid CompTIA Security+ certification; candidate must provide verification information and expiration date.
• Education, training, or certifications meeting applicable DoDM 8140.03 requirements for DoD 8140 work role 722 (ISSM). Candidates should identify all relevant certifications held.
• Demonstrated intermediate-level cybersecurity work-role experience.
• Ability to obtain and maintain the required SECRET clearance and Government access; an active SECRET clearance is strongly preferred due to classified/SIPRNet duties.
• Ability to support occasional after-hours tasks and courier classified equipment/media within TSRL when required.
• Ability to work on-site at JBSA–Fort Sam Houston in San Antonio, Texas, and to start November 30, 2026.

Desired skills:

• Active SECRET clearance and an existing Common Access Card (CAC) or recent DoD background investigation.
• Hands-on eMASS package management and ATO maintenance experience.
• Experience with ACAS, STIG compliance, and IAVM processes.
• Prior ISSM experience supporting DREN, RDT&E, research-laboratory networks, or classified SIPRNet enclaves.
• Advanced cybersecurity certifications beyond Security+, such as CISSP, CISM, or CGRC/CAP.
• Experience supporting cybersecurity audits, inspections, and Inspector General reviews.
• Experience briefing senior leaders and supporting cybersecurity working groups.
• Residence in or near the San Antonio metropolitan area.

ProSource360 Consulting Services, Inc. offers a complete benefits package to include Medical, Dental, Vision, 401 K , PTO and more. ProSource360 Consulting Services, Inc. is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.