Information System Security Manager (ISSM) (PL)

Canvas II, LLC.; Florida; On-site; USD 140,000 - 170,000; Full time

Job summary

Canvas II, LLC. seeks a senior cybersecurity leader to direct DoD/Air Force compliant programs in Florida. You will manage RMF/JSIG processes, ATO packages, and cross‑functional efforts ensuring robust defenses and continuous monitoring.

The role requires TS clearance, advanced degrees, and extensive DoD experience, with a focus on policy development, audits, and incident response.

Qualifications

• Experience managing cybersecurity and information assurance for DoD or Air Force systems.
• Deep knowledge of RMF, JSIG, NIST 800-53, DoDI 8500.01, DoDM 8140.03.
• Proficiency with security tools, vulnerability assessment, and IR processes.

Responsibilities

• Lead the development, implementation, and maintenance of security plans and policies.
• Oversee ATO package development and RMF/JSIG compliance for assigned systems.
• Manage user access, clearances, and need-to-know verification.
• Coordinate external audits, incident response, and security guidance translation.
• Provide security awareness training and ensure security posture monitoring.
• Collaborate with engineers to embed security in system architectures.

Skills

RMF/JSIG expertise

Cybersecurity leadership

NIST 800-53 knowledge

Audit coordination

Incident response

Analytical communication

Education

Master’s degree in Cybersecurity / IA / CS

Bachelor’s degree in related field

Tools

Vulnerability assessment tools

Security monitoring tools

Incident response tooling

Job description

Key ResponsibilitiesLead the development, implementation, and maintenance of comprehensive security plans, policies, and procedures aligned with federal mandates (e.g., FISMA, NIST frameworks), DoD, and Air Force directives.Oversee the full cybersecurity lifecycle and Authorization to Operate (ATO) package for assigned systems, ensuring compliance with Risk Management Framework (RMF) and/or Joint Special Access Program Implementation Guide (JSIG) requirements.Manage user access, ensuring proper clearances, authorization, and need-to-know are verified.Oversee the implementation and validation of security controls, perform continuous monitoring activities, and maintain the system's security posture.Coordinate and support external audits, incident response efforts, and the translation of security requirements into actionable guidance.Provide oversight of security awareness and training initiatives for system users.Evaluate threats and vulnerabilities, ensure compliance with security regulations and Security Classification Guides (SCGs), and support the development of security architecture documentation.Collaborate with engineers, IT professionals, and stakeholders to ensure seamless integration of security requirements into system architectures and operations.Prepare and present reports, briefings, and recommendations to leadership and stakeholders.Desired Skills & QualificationsDemonstrated experience managing cybersecurity and information assurance for Air Force or DoD information systems.In-depth knowledge of RMF, JSIG, NIST 800-53, DoDI 8500.01, DoDM 8140.03, and other relevant standards.Proficiency in security tools, vulnerability assessment, and incident response processes.Strong analytical, organizational, and communication skills.Ability to lead multidisciplinary teams and manage complex security projects.Relevant professional certifications (e.g., CISSP, CISM, Security+) are highly desirable.Clearance and Education RequirementsUS CitizenMust possess or be able to obtain and maintain a Top Secret Clearance.Master’s degree in Cybersecurity, Information Assurance, Computer Science, or a related field and at least 10 years of relevant experience; ORBachelor’s degree in a related field and at least 18 years of relevant experience (substituting 8 years for the Master’s); OR12 years of relevant experience (in lieu of a Master’s degree)