Information System Security Manager (ISSM)

DINE SOURCE LLC; Scottsdale (AZ); On-site; USD 120,000 - 150,000; Full time

Job summary

Dine Source is seeking an ISSM to support an Air Force program. The candidate will lead SSP development and accreditation, manage RMF activities, and ensure compliance with DoD and government regulations on NIPR systems.

You will collaborate with a multi-contractor Cyberteam and act as a point of contact for inspections and audits. Qualified applicants have an active Secret clearance, 8+ years in cybersecurity, and experience with Air Force RMF, NIST 800-53, eMASS, and DevSecOps in on‑prem and

Qualifications

• Active Secret Clearance required.
• BS in Computer Science, Cyber Security, or related field; 8+ years cybersecurity experience.
• One of CASP+, CISSP, CISSP Associate, or GSLC.
• 3+ years with Air Force RMF security frameworks and DoD/AF policies.
• Experience with RMF, NIST 800-53 rev 4/5 controls.
• Familiar with eMASS and ATOM.
• DevSecOps security validation testing in on-prem and cloud environments.
• ACAS, Splunk, audit log reviews, and cybersecurity monitoring practices.

Responsibilities

• Develops, implements, and maintains data strategies to ensure quality and accessibility.
• Leads SSP development, accreditation, and oversight, including periodic reviews for compliance.
• Primary contact for IS security inspections, tests, and reviews by oversight authorities.
• Ensure unclassified systems follow DoD/government regulations while staying accredited.
• Collaborates with a multi-contractor team on Cybersecurity, continuous monitoring, and compliance.

Skills

Secret clearance

RMF knowledge

NIST 800-53

DevSecOps

Security monitoring

Risk assessment

Education

BS in Computer Science / Cyber Security

CASP+

CISSP

GSLC

Tools

eMASS

ITIPS

ACAS

Splunk

STIG reviews

Job description

Dine Source is seeking an ISSM to support an Air Force program. We are seeking a motivated cybersecurity professional to join our Cyber team. As a member of our team, you'll create system security plans, make cyber risk decisions, and conduct audits on NIPR systems.Responsibilities:Develops, implements, and maintains data strategies to ensure quality and accessibilityDevelops/maintains the definition and documentation of architectural standards, reference architectures processes, operating models, and logical and physical data/associated data management resourcesEnsure unclassified systems follow DoD and government regulations while still meeting program demands and operating in an accredited state.Lead all aspects of SSP development, maintenance, accreditation/re-accreditation, and oversight, including conducting periodic reviews to ensure compliance.Work with cybersecurity lead and be a primary contact for IS security inspections, tests, and reviews by oversight authorities.Other duties as assigned.Qualifications:Must have an active Secret ClearanceHave acquired a BS in Computer Science, Cyber Security, or a related field; with 8+years of relevant cybersecurity experience;Must have one of the following current certifications: CASP+, CISSP, CISSP Associate, or GSLC.Have 3+ years working with the Air Force RMF security frameworks, including DoD and Air Force security policies and instructions.Must have the experience and the ability to provide tactical information security advice and manage all Cybersecurity related activities for current or future IT platformsMust work in conjunction with a multi-contractor team in support of Cybersecurity, continuous monitoring, and other emerging compliance requirements.Must ensure Federal Information Security Management Act (FISMA) requirements are being met and track in the Air Force’s Information Technology Investment Portfolio Suite (ITIPS).Must ensure that software, hardware, and firmware comply with appropriate IAVM’s.Must track and action POA&M entries as part of the RMF process.Experience is required for reviewing and updating STIG results.Must ensure Continuous Monitoring is adhered to.Must have working experience with Risk Management Framework and NIST 800-53 revision 4 and revision 5 controlsMust have experience working within eMASS and obtaining an ATOMust be familiar with performing Security validation testing through a DevSecOps process and within both on-premises and a Cloud EnvironmentMush have experience with ACAS, utilizing Splunk, reviewing of audit logs, and other cybersecurity monitoring functionsAbility to identify risks of implementing technology solutions and analyze the impact on achieving desired business outcomesAbout UsDiné Development Corporation (DDC) is a Navajo Nation owned family of companies that provides government agencies and commercial organizations with high-quality IT, professional, environmental, and research and development services. DDC is dedicated to empowering the Navajo Nation and communities we serve.BenefitsEligible full-time employees receive a comprehensive benefits package, including medical, dental, vision, life and disability coverage, retirement savings with company match, paid time off, voluntary supplemental benefits, and access to an employee assistance program. The package also includes educational assistance, with tuition reimbursement.EEO StatementThis contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a) and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, national origin, or for inquiring about, discussing, or disclosing information about compensation, or any other basis prohibited by law. We participate in E-Verify.