Information Systems Security Manager

Acara Solutions, Inc.; Leander (TX); Vor Ort; USD 103.000 - 124.000; Vollzeit

Benefits dieser Stelle

TS/SCI eligibility preferred

Zusammenfassung

Acara Solutions seeks an Information Systems Security Manager to lead RMF activities and ensure DoD compliance for space and mission systems. You will develop SSPs, POA&Ms, SARs, and coordinate assessments with SCAs and third parties.

The role requires expertise in CNSSP-12/CNSSI 53 alignment, NIST SP 800-37 Rev. 2, and experience delivering authorization packages to Authorizing Officials. A TS/SCI eligibility is preferred.

Qualifikationen

• 4+ years in ISSM, SCA, or cybersecurity compliance in aerospace/DoD sectors.
• 4+ years with DoD security tools: eMASS, ACAS, HBSS.
• 4+ years developing SSPs, POA&Ms, SARs.
• RMF authorization management per NIST SP 800-37 Rev. 2, achieving ATOs.

Aufgaben

• Develop and maintain system security architecture documentation, including data flow diagrams and control inheritance mappings.
• Coordinate with system owners and engineering teams to identify security control requirements and validate policy mandates.
• Conduct security impact assessments, threat modeling, and risk assessments on architectures and changes.
• Review and approve technical security requirements in system specs, ICDs, and design docs.
• Manage end-to-end RMF processes for multiple systems to achieve and maintain ATOs.

Kenntnisse

ISSM experience

SCA experience

DoD contracting

eMASS

ACAS

HBSS

SSP/POA&M/SAR

RMF/NIST SP 800-37

Ausbildung

Bachelors in CS/Cybersecurity/Info Systems

Tools

Jama Connect

IBM DOORS

Jobbeschreibung

Job Title: Information Systems Security Manager

Employment: Contract to hire (6 months)

Compensation: $75-$90/hr

Schedule: 40 hours /week

What You'll Do:

• Develop and maintain system security architecture documentation, including data flow diagrams, security boundary definitions, and control inheritance mappings
• Coordinate with system owners and engineering teams to identify security control implementation requirements and validate that technical solutions meet policy mandates
• Conduct security impact assessments, threat modeling, and risk assessments on proposed architectures, system changes, and configuration updates
• Review and approve technical security requirements in system specifications, interface control documents (ICDs), and engineering design documentation
• Manage end-to-end RMF processes per NIST SP 800-37 Rev. 2 for multiple concurrent systems to achieve and maintain Authorities to Operate (ATOs)
• Develop, maintain, and update System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and coordinate Security Assessment Reports (SARs)
• Coordinate independent security control assessments with Security Control Assessors (SCAs) or third-party assessment organizations
• Prepare and deliver authorization packages to Authorizing Officials, including executive summaries, risk determinations, and authorization recommendations
• Present compliance briefings to senior management, government customers, and AOs regarding security posture, risk status, and authorization timelines
• Establish and operate continuous monitoring programs per NIST SP 800-137, defining security metrics, collection mechanisms, and reporting cadences
• Validate system configurations comply with Security Technical Implementation Guides (STIGs), DISA baselines, and DoD security configuration requirements
• Review vulnerability scan results, penetration test findings, and security assessment outputs to identify control weaknesses and drive remediation
• Maintain current security control traceability matrices mapping policy requirements to implemented controls and assessment evidence
• Lead corporate information security compliance initiatives ensuring adherence to NIST SP 800-171, NIST SP 800-53, CMMC, and Space Policy Directive 5 (SPD-5)
• Support CMMC Level 2+ compliance activities, including practice implementation validation, artifact development, and assessment preparation
• Develop and maintain security policies, procedures, and standards that implement regulatory requirements
• Support Defense Counterintelligence and Security Agency (DCSA) assessments, customer security audits, and government inspections
• Track regulatory changes and assess impacts to existing authorizations and compliance programs
• Participate in system engineering reviews, design reviews, and change control boards to ensure security requirements are integrated early in development
• Validate security requirements are traceable from policy sources through system specifications to implemented controls and test procedures
• Support incident response activities by providing authorization boundary information, security control details, and impact assessments
• Interface with mission partners and external system interconnections to establish appropriate security agreements and MOUs

About the Opportunity

• Serve as subject matter expert for CNSSP-12 and CNSSI 53 requirements, translating policy mandates into specific system security requirements and control baselines for space vehicles, ground stations, and mission support systems
• Lead security categorization activities per CNSSI 53, determining appropriate Impact Levels (IL) and establishing control overlays for all national security systems

Why You'll Love Working Here

• Supportive, team-driven culture that values collaboration, transparency, and accountability
• Opportunity to grow your career with a global workforce solutions leader serving multiple industries
• People-first environment that encourages employees to bring their authentic selves to work
• Strong focus on partnership, innovation, and delivering meaningful results for clients and candidates

Why This Opportunity is Exciting

• This role offers the chance to join a company that prioritizes both people and performance-where your contributions directly impact client success while giving you room to grow and develop professionally.

About Acara Solutions

• Acara is a premier recruiting and workforce solutions provider-we help companies compete for talent. With a legacy of experience in various industries worldwide, we partner with clients, listen to their needs, and customize visionary talent solutions that drive desired business outcomes. We leverage decades of experience to deliver contingent staffing, direct placement, executive search, and workforce services worldwide.

Job Requirements

What You'll Bring

• Bachelors Degree in Computer Science or Cybersecurity or Information Systems
• 4+ years of experience in ISSM, Security Control Assessor (SCA), or in cybersecurity compliance roles within aerospace, defense, intelligence, or DoD contracting environments.
• 4+ years of experience in DoD security tools including eMASS, ACAS, and HBSS
• 4+ years of experience in developing System Security Plans (SSPs), POA&Ms, and Security Assessment Reports (SARs)

What Sets You Apart

• Proven track record managing RMF authorization processes per NIST SP 800-37 Rev. 2, achieving ATOs for complex technical systems
• In-depth knowledge of NIST SP 800-53, NIST SP 800-171, and FISMA compliance frameworks
• Strong understanding of DISA STIGs and DoD Security Technical Implementation Guides
• Exceptional written and verbal communication skills with ability to translate complex security requirements for technical and executive audiences
• Demonstrated expertise implementing CNSSP-12 and CNSSI 53 requirements for national security space systems or satellite programs
• Direct experience serving as ISSM for operational space systems, satellite ground stations, or telemetry, tracking, and commanding (TT&C) systems
• Knowledge of satellite operations security requirements, including command authentication and telemetry encryption
• Certified Information Systems Security Professional (CISSP) or similar certification (CISSP-ISSAP, CISSP-ISSEP, CAP, or Security+)
• Experience with CMMC Level 2 or Level 3 assessment and implementation
• Familiarity with requirements management tools (Jama Connect, IBM DOORS) used in systems engineering environments
• Knowledge of NIST SP 800-160 (Systems Security Engineering) and secure development lifecycle practices

Additional Information

• Requires the ability to obtain an TS/SCI Secret Clearance
• Upon offer of employment, the individual will be subject to a background check and drug screen
• In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the necessary employment eligibility verification form upon hire.
• Under the International Traffic in Arms Regulations (ITAR), all employees assigned to this client must provide documentation verifying their status as a 'U.S. Person,' as defined in ITAR clause 120.15. A U.S. Person is a protected individual under the anti-discrimination provisions of U.S. immigration laws.

Aleron companies (Acara Solutions, Aleron Shared Resources, Broadleaf Results, Lume Strategies, TalentRise, Viaduct) are an Equal Opportunity Employer. Race/Color/Gender/Religion/National Origin/Disability/Veteran.

Applicants for this position must be legally authorized to work in the United States. This position does not meet the employment requirements for individuals with F-1 OPT STEM work authorization status.