Information Systems Security Manager / Security Specialist

Top Aces Corporation; Mesa (AZ); On-site; USD 110,000 - 140,000; Full time

Job summary

Top Aces Corporation seeks an Information Systems Security Manager / Security Specialist in Mesa, AZ to oversee classified systems security and industrial security programs. The role includes authorization, monitoring, training, records management, and collaboration with the FSO and IT teams.

The position requires RMF knowledge, Windows administration basics, and strong documentation skills, with eligibility for government security clearances and potential weekend work as needed.

Qualifications

• Associate or bachelor’s degree in Cybersecurity, IT, Information Systems, Computer Science, Security Management, or related field.
• Minimum 2 years’ experience in cybersecurity, information technology, information assurance, or cleared defense contractors.
• Experience supporting Windows-based systems, compliance documentation, stand-alone information systems, cleared defense contractors, or government security activities is preferred.
• Certifications such as CompTIA Security+, ISC2 Certified in Cybersecurity (CC), Microsoft Fundamentals, CGRC, SPeD, ISP, or similar are preferred.

Responsibilities

• Learn, apply, and maintain security requirements governing classified information systems, including MUSA systems.
• Support the authorization, operation, maintenance, relocation, and decommissioning of classified information systems and ISSM responsibilities.
• Maintain accurate and inspection-ready system authorization documentation in NISP eMASS (SSP, inventories, security-control documentation, continuous-monitoring records, corrective actions).
• Implement and maintain system-security configurations, STIGs, software restrictions, patching, malware protection, and other documented requirements.
• Administer user accounts, permissions, audit logs, training, and procedures.
• Document hardware/software changes that may impact system authorization boundary.
• Maintain procedures for classified-system media handling, data transfer, backup/recovery, sanitization, disposal.
• Conduct system reviews, continuous-monitoring activities, self-inspections; track corrective actions.
• Coordinate with FSO, IT, program teams, and system users to communicate status, risks, and actions.
• Support DCSA assessments, system authorization activities, inspections, and government coordination.

Skills

Excellent communication

Windows administration basics

RMF concepts (learn/apply)

Documentation/records management

Ability to work nights/weekends

Professional judgment and escalation

Safety and OSHA awareness

Education

AS/BS in Cybersecurity or related field

2+ years in cybersecurity/IT/IA/cleared environments

Tools

MS Office Suite

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Information Systems Security Manager / Security Specialist

Full Time Professional Mesa, AZ, US

The Information Systems Security Manager (ISSM) / Industrial Security Specialist supports the secure operation of the Company’s classified information systems and broader Industrial Security program, with classified systems security serving as the primary focus of the role. The position supports the administration, authorization, monitoring, and protection of classified systems while developing toward formal appointment as ISSM through required training, qualification, and hands‑on experience. The role also provides support to personnel security, classified visits, security education, self‑inspections, records management, and other Industrial Security activities under the direction of the Facility Security Officer (FSO). The information below is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required for this position.

PRIMARY RESPONSIBILITIES – CLASSIFIED INFORMATION SYSTEMS SECURITY

• Learn, apply, and maintain security requirements governing classified information systems, including Multi‑User Stand‑Alone (MUSA) systems used to process classified information.
• Support the authorization, operation, maintenance, relocation, and decommissioning of classified information systems and once formally appointed, perform assigned ISSM responsibilities within authorized scope.
• Maintain accurate and inspection‑ready system authorization documentation in NISP eMASS, including System Security Plans, hardware and software inventories, security‑control documentation, continuous‑monitoring records, and corrective actions.
• Implement and maintain approved system‑security configurations, Security Technical Implementation Guides (STIGs), software restrictions, patching, malware protection, and other documented authorization requirements.
• Administer user accounts, permissions, privileged access, audit logs, user agreements, and required system‑security training in accordance with approved procedures.
• Control and document the introduction, use, modification, and removal of hardware, software, peripherals, and removable media; elevate proposed changes that may impact the system authorization boundary.
• Maintain procedures and records for classified‑system media handling, data transfer, backup and recovery, sanitization, maintenance, relocation, and disposal.
• Conduct system reviews, continuous‑monitoring activities, and self‑inspections; identify deficiencies and track corrective actions through completion.
• Report and support the response to classified data spills, malware, suspected compromise, unauthorized activity, configuration deviations, and other cybersecurity or security incidents.
• Support DCSA assessments, system authorization activities, documentation requests, inspections, and coordination with government security representatives.
• Coordinate with the FSO, Information Technology, program teams, and system users to communicate system status, identified risks, limitations, and required actions.
• Perform other duties as assigned.

SECONDARY RESPONSIBILITIES – INDUSTRIAL SECURITY SUPPORT

• Assist the FSO with implementation of 32 CFR Part 117/NISPOM requirements, company security procedures, and maintenance of inspection‑ready Industrial Security records.
• Support personnel‑security activities, including clearance verification, briefings and debriefings, nondisclosure agreements, training records, access changes, and assigned DISS or NISS actions.
• Support incoming and outgoing classified visits, need‑to‑know validation, visitor controls, escort requirements, and customer security coordination.
• Assist with safeguarding, accountability, marking, storage, transmission, destruction, and incident reporting requirements for classified information, as applicable.
• Support review and tracking of DD Form 254 requirements and program‑specific security guidance under FSO oversight.
• Assist with security education, counterintelligence awareness, foreign travel and suspicious‑contact reporting, Insider Threat Program activities, and documentation of reportable matters.
• Support annual self‑inspections, corrective actions, DCSA or customer reviews, and continuous improvement of the Industrial Security program.
• Coordinate with Human Resources, Information Technology, Facilities, Contracts, Operations, Program Management, and Trade Compliance to integrate security requirements into daily business activities.
• Provide practical security guidance within assigned authority and promptly elevate potential violations, unclear requirements, or matters requiring additional authorization to the FSO.
• Perform other duties as assigned.

SKILLS AND/OR QUALIFICATIONS

• Excellent verbal and written communication skills, including the ability to effectively communicate technical and security requirements with internal and external customers.
• Foundational knowledge of Microsoft Windows administration, user‑account management, security settings, audit logging, patching, malware protection, and basic system troubleshooting.
• Knowledge of, or ability to learn and apply, Risk Management Framework (RMF) concepts, NISP eMASS, applicable STIGs, 32 CFR Part 117/NISPOM requirements, and DCSA classified‑system guidance.
• Strong documentation, organizational, and records‑management skills with demonstrated attention to detail and the ability to manage assigned priorities and meet deadlines.
• Ability to follow approved procedures, recognize potential security or compliance concerns, and exercise appropriate judgment regarding escalation.
• Demonstrated sound judgment, discretion, reliability, and ability to appropriately handle classified, controlled, and sensitive information.
• Ability to maintain a professional, service‑oriented approach while effectively applying and enforcing security requirements.
• Ability to complete required DCSA/CDSE role‑based training and company‑specific classified‑system qualification requirements.
• Must possess a working knowledge of SMS Principles and ICAO, FAA, and DoD frameworks.
• Must be proficient with safety management platforms, experience with SMS Pro is preferred.
• Must be able to work under pressure and meet deadlines, while maintaining a positive attitude.
• Ability to analyze data, identify trends, and prepare high‑quality reports.
• Excellent verbal and written communication skills, including ability to effectively communicate with internal and external customers.
• Must be proficient in MS Office Suite.
• Must demonstrate safe and healthy workplace practices.
• Must be able to work nights, weekends, and holidays as needed.
• Must be able to travel within the US and internationally.
• Must demonstrate the knowledge, skills, and abilities of the ISSM/Industrial Security Specialist in daily work performance.
• Must be eligible to obtain and maintain required level of US Security Clearance; Active Secret Security Clearance at time of hire is preferred.
• Must be able to obtain a CAC (Common Access Card) and not be barred from any installation.

EDUCATION AND/OR WORK EXPERIENCE

• An associate or bachelor's degree in Cybersecurity, Information Technology, Information Systems, Computer Science, Security Management, or a related field, required. Equivalent military, government, technical training, certifications, or relevant experience may be considered.
• Minimum 2 years’ experience in cybersecurity, information technology, information assurance, classified information systems, military or government security, Industrial Security, or a related field.
• Previous experience supporting Windows‑based systems, compliance documentation, stand‑alone information systems, cleared defense contractors, or government security activities is preferred.
• CompTIA Security+, ISC2 Certified in Cybersecurity (CC), Microsoft Fundamentals, Certified in Governance, Risk and Compliance (CGRC), Security Professional Education Development (SPeD), Industrial Security Professional (ISP), or similar certification is preferred.

PHYSICAL REQUIREMENTS

• Ability to sit for extended periods of time while working at a computer.
• Ability to work in an office environment with standard lighting, noise levels, and climate conditions.
• Ability to inspect, connect, inventory, and relocate laptops, peripherals, media, and related equipment.
• Must be able to lift and carry up to 30 lbs.
• Reasonable accommodation may be made to enable individuals with disabilities to perform essential functions of the role.

SPECIAL WORK CONDITIONS

• Must be a U.S. Citizen to be eligible for security designation, clearance, and to access training required of the role.
• Formal appointment as ISSM is contingent upon completion of required training, demonstrated competence, company approval, required clearance and access, and applicable government authorization requirements.
• Prior to formal appointment, the employee may perform ISSM‑support activities under designated oversight while completing required qualifications and training.
• A flexible work arrangement, including limited remote work, may be available based on business needs and supervisor approval; duties involving classified information, classified systems, or secure‑site activities must be performed onsite.