Information Systems Security Manager (ISSM)

K2 Group, Inc.; Kentucky; On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Medical/Dental/Vision Insurance

401(k) & ROTH 401(k) plans

Profit Sharing Plan

Tuition Reimbursement

Paid Time-Off

Job summary

K2 Group, Inc. is seeking an Information Systems Security Manager (ISSM) to support the Air Force Research Laboratory at Wright-Patterson AFB, OH. The role requires a minimum of five years of relevant experience, with specific security certifications needed at start. The ISSM will oversee compliance with security regulations, conduct system maintenance, and prepare documentation. Benefits include medical insurance, 401(k) plans, profit sharing, and paid time-off.

Qualifications

• Five years of relevant experience in Information Systems Security.
• Active Top Secret/SCI clearance is required.
• Proven ability to maintain and update security documentation.

Responsibilities

• Ensure C&A compliance with applicable regulations.
• Conduct routine maintenance, backups, and system upgrades.
• Coordinate with system managers to maintain documentation.

Skills

Information Assurance (IA) controls

Risk Management Framework (RMF)

Microsoft SQL Server Management Studio

Vulnerability scanning

Documentation and reporting

Education

DoD 8140.03-compliant certification

IAT Level II Certification

IAT Level III Certification

Job description

Information Systems Security Manager (ISSM)

K2 Group is searching for an ISSM to support the Air Force Research Laboratory Sensors Directorate (AFRL/RY) at Wright‑Patterson Air Force Base, OH.

Duties:

• Be the Directorate’s Certification & Accreditation (C&A) process expert.
• Perform C&A duties in compliance with the Risk Management Framework (RMF) structure at the SCI and below level in accordance with all applicable regulations.
• Follow AFRL procedures to use the Enterprise Mission Assurance Support Service (eMASS), AFRL Enterprise Business System (EBS), Xacta or other workflow tools to obtain an Interim Approval to Operate IATO/ Approval to Operate (ATO).
• Prepare, submit, and track all Directorate C&A packages of all Research, Development, Test, & Evaluation (RDT&E) computer information systems for base‑level and higher headquarters approval, and ensure that all systems are following DoD Information Technology (IT) C&A guidance.
• Submit a quarterly Plan of Action and Milestones (POA&Ms) to HQ AFRL and maintain 100% accountability for all accredited systems and RDT&E systems requiring POA&Ms.
• Ensure the Directorate C&A community remains updated on eMASS; review eMASS registration workbooks, recommend changes/clarification and submit updated workbooks to HQ AFRL for registration of Point‑to‑Point, Standalone, Standalone Enclave systems having a Federal Information Security Management Act (FISMA) requirement.
• Coordinate any changes or modifications to hardware, software, or firmware of a system directly with the Authorizing Official (AO)/ Delegated Authorizing Official (DAO) prior to the change.
• Conduct routine maintenance, perform backups, and install upgrades and patches to the systems and networks.
• Produce artifacts that include but not limited to answers, implementation, documentation, and testing of applicable Information Assurance (IA) controls, topology diagrams, hardware lists, software lists, ports and protocols lists, and plan of action and milestones.
• Complete or assist in the completion of vulnerability scans and DISA STIG reviews.
• Research and propose solutions for identified risks to eliminate or mitigate adverse impact to an acceptable level.
• Interact and coordinate with system program managers to create, update, and maintain system documentation and supporting artifacts related to the RMF process.

Requirements:

• Five (5) years of relevant experience

Certifications:

• SPēD Security Fundamentals Professional Certification (SFPC) – required at start
• Microsoft SQL Server Management Studio (or Security+) – required at start
• SPēD Security Asset Protection Professional Certification (SAPPC) – required within 6 months of entry on duty
• Must hold a DoD 8140.03‑compliant certification (at start):
• Information Assurance Technical (IAT) Level II (required)
• Information Assurance Technical (IAT) Level III (preferred)

Clearance:

• Active Top Secret/SCI

Benefits:

• Medical/Dental/Vision Insurance
• FSA Medical & FSA Dependent Care
• Pre-tax 401(k) & ROTH 401(k) plans
• Profit Sharing Plan
• Life & Accidental Death Insurance
• Short Term & Long Term Disability
• Voluntary Group Life Insurance option
• Tuition Reimbursement
• Job‑related Course Reimbursement
• Holiday Pay
• Paid Time‑Off