Information Systems Security Manager (ISSM)

Kratos Defense & Rocket Support Services, Inc; Crane (TX); On-site; USD 140,000 - 180,000; Full time

Job summary

Kratos Defense & Rocket Support Services, Inc seeks an experienced Information Systems Security Manager (ISSM) to lead security management for our classified systems. The role requires implementing RMF/JSIG processes, maintaining security documentation, and coordinating with government authorities.

The candidate will ensure secure system design, operation, and maintenance in line with security policies and regulatory frameworks, while coordinating with IT and Security teams to sustain accredited

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field.
• 5+ years IT experience in a classified environment, or 3+ years as ISSM/ISSO in industrial security.
• Active in-scope TOP SECRET clearance and ability to obtain SCI/SAP access.
• DoD 8140/DoD 8570 approved IAM Level 2-3 within 6 months of hire.

Responsibilities

• Lead risk management activities for classified systems in compliance with DCSA/DAAG/JSIG.
• Serve as primary point of contact for classified systems and oversee BoE documentation (SSP, POA&Ms).
• Maintain day-to-day security posture and continuous monitoring, including patches.
• Coordinate vulnerability management, assessments, testing, and remediation with IT and Security teams.
• Ensure personnel have necessary clearances and security responsibilities before access.

Skills

Risk management

Security policy

Communication

Team leadership

Education

Bachelor's degree in Cybersecurity

Equivalent experience

Tools

eMASS

Windows

Linux

Server virtualization

Job description

GENERAL JOB SUMMARY

We are seeking an experienced and highly motivated Information Systems Security Manager (ISSM) to lead security management and compliance activities for information systems supporting our organization. The ISSM will be responsible for ensuring systems are securely designed, implemented, operated, and maintained in accordance with organizational security policies, regulatory requirements, and applicable cybersecurity frameworks.This position is on-site and is neither hybrid nor remote eligible.

ESSENTIAL JOB FUNCTIONS

• Implement the risk management framework for classified systems, typically following the Defense Counterintelligence Security Agency (DCSA), DAAG, or JSIG process and supporting communications with cognizant security authorities.
• Serve as the primary point of contact for classified systems.
• Produce and maintain Body of Evidence (BoE) documentation to include risk assessments, System Security Plan (SSPis) and Plan of Action and Milestones (POA&Mis).
• Maintain the day-to-day security posture and continuous monitoring for all systems, including patching and updates.
• Assist Information Security team in unclassified security operations, including continuous monitoring, incident response, and vulnerability management.
• Assist Information Technology team in unclassified services functions.
• Ensure all users have the requisite security clearances, authorization, need-to-know, and are aware of their security responsibilities before granting access to the information systems.
• Ensures adherence to information system security policies and procedures.
• Coordinate vulnerability management, security assessments, penetration testing, and remediation activities.
• Performs oversight and provides guidance for media sanitization and destruction.
• Confirms domain/local policies are configured to meet regulatory requirements.
• Assesses changes to the system/operational needs that could affect its accreditation.
• Voting/veto member of the CCB for all systems.
• Assists with coordination between Kratos and Government authorities regarding system security posture requirements.
• Participate in information system security inspections, assessments, tests, and reviews.
• Maintains a working knowledge of system functions, security policies, technical security safeguards and operational security measures.
• Schedules periodic testing and other continuous monitoring activities to evaluate the security posture of IS.
• Develops an effective information system security education, training, and awareness program.
• Interfaces with internal and external customers and auditors, program managers, IT, security staff, etc.
• Support security incident response, investigations, and corrective actions.

Other Job Functions

• Other duties as assigned

SUPERVISORY RESPONSIBILITY

Coordination of Information System Security Officers (ISSO) and System Administrators (SysAdmins)

Keyword: Security, Systems, Supervisor, Cybersecurity
Required Experience:

KNOWLEDGE, SKILLS AND ABILITIES REQUIRED

• U.S. Citizenship required.
• Thorough understanding of US Government (specifically DoD) IS security policies.
• Strong communication skills, strong critical thinking and problem-solving skills; self-motivated with ability to effectively prioritize multiple projects; ability to work with people in a team environment and deal effectively with changing project priorities.
• Ability to manage time, make sound decisions, take independent action, analyze problems and provide focused solutions.
• High degree of attention to detail.
• Must have active in-scope TOP SECRET clearance and be able to obtain and maintain access to Sensitive Compartmented Information (SCI) and/or any necessary Special Access Programs (SAP).
• DoD 8140/DoD 8570 approved (IAM Level 2-3) certification required within 6 months of hire.

EDUCATION AND EXPERIENCE

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field; equivalent experience may be considered.
• 5+ years of experience in Information Technology (IT) in a classified environment, or 3+ years of experience as an ISSM/ISSO in Industrial security.
• Strong understanding of identity and access management, endpoint security, network security, logging/monitoring, and incident response
• Experience administering Windows and Linux operating systems, experience with large-scale server systems, thin client architecture, system virtualization and other related peripherals.
• Strong understanding of cybersecurity frameworks such as NIST CSF, NIST SP 800-53, RMF, ISO 27001, CIS Controls, or equivalent.
• System accreditation experience under DCSA cognizance utilizing eMASS.

WORK ENVIRONMENT / PHYSICAL REQUIREMENTS

This position involves work in an office and laboratory environment and could require the use of personal protective equipment (PPE) including:

• Safety glasses
• Hearing protection (varied based on tasks)
• Shoe covers
• Physical Demands
• Perform work using a computer for extended periods of time.
• Sit or stand for extended periods of time without leaving the work area.
• Climb ladders and stairs.
• Walk for considerable distances.
• Lift objects up to 50 pounds.
• Reach for objects above head or below waist.
• Stoop or crouch by bending at the waist or by bending legs.
• Withstand exposure to low and high temperature levels that result in possible body discomfort.

#LI-ACI & #LI-Onsite

From: Kratos Defense