ISSM

Koniag Government Services; Maryland; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) retirement plan

Paid time off

Paid parental leave

Life and disability insurance

Flexible spending accounts

Commuter benefits

Tuition reimbursement

Job summary

Koniag IT Systems, LLC, a Koniag Government Services company, seeks an ISSM Consultant with a Top- Secret clearance to support RMF processes for DOE/NNSA programs. This on-site position requires strong experience with security authorization, documentation, and cross-agency collaboration.

The ideal candidate will manage ISSPs, risk assessments, and authorization packages while coordinating with AO/AODR and contractor staff. DOE/NNSA familiarity is preferred.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field.
• Minimum of 7+ years of experience in cybersecurity or information security.
• Minimum of 5+ years of experience with RMF or similar security authorization frameworks.
• Experience as an ISSM or equivalent position managing security authorization processes.
• Experience developing and maintaining security documentation including ISSPs, Risk Assessments, and Security Baselines.
• Experience working with federal agencies, particularly DOE, NNSA, or Department of Defense.
• Training and experience that meets NNSA and/or DoD 8140 requirements (or equivalent).

Responsibilities

• Ensure system, application, and hardware authorization activities such as ISSPs, Risk Assessments, and Security Baselines are completed in a timely and accurate manner.
• Manage both initial authorization and re-authorization processes for information systems.
• Develop comprehensive authorization packages and submit them to appropriate stakeholders for review.
• Submit finalized authorization packages to the AO or AODR for review and approval upon ISSM clearance.
• Maintain current knowledge of AO-approved risk boundaries and risk tolerance levels.
• Update authorization documentation at defined frequencies in accordance with RMF objectives.
• Ensure continuous monitoring of security controls and implementation of updates.
• Approve operations only when covered within existing authorizations.
• Ensure all decisions support the AO and maintain transparency.
• Coordinate onboarding and termination for contractor personnel.
• Ensure deliverables meet Enterprise Cybersecurity Program requirements and quality standards.
• Provide strategic support at meetings, briefings, and presentations.
• Collaborate with NA-IM and NNSA contractors.

Skills

RMF knowledge

Federal regulations

Documentation

Project management

Communication

Security clearance

RMF/audit experience

Incident response

Security controls

Continuous monitoring

Education

Bachelor's degree in Cybersecurity/IT/CS

Master's degree in Cybersecurity (desired)

Tools

Archer

eMASS

Job description

Koniag IT Systems, LLC a Koniag Government Services company, is seeking an ISSM Consultant with a Top- Secret security clearance to support KITS and our government customer. We will consider candidates in the following areas: Las Vegas, NV, Albuquerque, NM, Germantown, MD or Washington DC. This is an On-Site position.

Benefits include:

• medical, dental, and vision insurance
• 401(k) retirement plan
• paid time off
• paid parental leave
• life and disability insurance
• flexible spending accounts
• commuter benefits
• tuition reimbursement

Koniag IT Systems is seeking an experienced Information System Security Manager (ISSM) to support the Department of Energy's National Nuclear Security Administration (DOE NNSA). The ideal candidate will have strong expertise in cybersecurity risk management, security authorization processes, and compliance with federal security requirements. This position requires a professional who can effectively manage system authorization activities while ensuring adherence to the Risk Management Framework (RMF). Candidates must meet NNSA and/or DoD 8140 training requirements and experience levels and be eligible for the appropriate security clearance.

Essential Functions, Responsibilities & Duties may include, but are not limited to: The ISSM will be responsible for ensuring that federal and program cybersecurity requirements are implemented as needed, including executing activities related to the Risk Management Framework (RMF). Principal responsibilities include:

Authorization Activities:

• Ensure system, application, and hardware authorization activities such as Information System Security Plans (ISSPs), Risk Assessments, and Security Baselines are completed in a timely and accurate manner
• Manage both initial authorization and re-authorization processes for information systems
• Develop comprehensive authorization packages and submit them to appropriate stakeholders for review
• Submit finalized authorization packages to the Authorizing Official (AO) or Authorizing Official Designated Representative (AODR) for review and approval upon ISSM clearance

Maintenance Activities:

• Maintain current knowledge of AO-approved risk boundaries and risk tolerance levels
• Update authorization documentation at organizationally defined frequencies in accordance with the risk management objectives of the organization
• Ensure continuous monitoring of security controls and implementation of necessary updates

Approval and Management:

• Approve operations only when covered within existing authorizations
• Ensure all decisions support the Authorizing Official and maintain full transparency
• Actively manage and coordinate onboarding and termination processes for contractor personnel
• Ensure all work products and deliverables meet Enterprise Cybersecurity Program requirements and adhere to quality standards
• Provide strategic support at meetings, briefings, and presentations as needed
• Work, coordinate, and maintain productive working relationships with other contractors supporting NA-IM and NNSA

Education and Experience:

Required:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field
• Minimum of 7+ years of experience in cybersecurity or information security
• Minimum of 5+ years of experience with RMF or similar security authorization frameworks
• Experience as an ISSM or equivalent position managing security authorization processes
• Experience developing and maintaining security documentation including ISSPs, Risk Assessments, and Security Baselines
• Experience working with federal agencies, particularly DOE, NNSA, or Department of Defense
• Training and experience that meets NNSA and/or DoD 8140 requirements (or equivalent)

Required Skills and Competencies:

• Comprehensive knowledge of the NIST Risk Management Framework (RMF)
• Strong understanding of federal cybersecurity regulations, policies, and standards
• Proficiency with security authorization documentation and processes
• Experience with risk assessment methodologies and practices
• Knowledge of security control implementation and assessment
• Strong project management skills with ability to manage multiple authorization projects simultaneously
• Excellent documentation skills and attention to detail
• Superior communication skills, both written and verbal
• Ability to effectively interface with senior leadership, technical staff, and contractors
• Experience with continuous monitoring and ongoing authorization processes
• Knowledge of incident management and reporting requirements Understanding of NNSA and DOE security requirements
• Ability to obtain and maintain required security clearance
• Experience coordinating personnel security processes (onboarding/offboarding)
• Strong interpersonal skills and ability to collaborate across organizational boundaries

Clearance Requirement:

• Top Secret security clearance / Q

Desired Skills and Competencies:

• Master's degree in Cybersecurity, Information Technology, or related field
• Current security clearance
• Certifications such as CISSP, CAP, CISM, or equivalent
• Experience specifically with DOE NNSA cybersecurity requirements and authorization processes
• Experience with Archer, eMASS or similar authorization management systems
• Knowledge of FISCAM, FISMA, and other federal compliance frameworks
• Experience working in classified environments
• Prior experience working with Authorizing Officials and security governance bodies
• Experience developing security policies and procedures
• Knowledge of industrial control system security
• Experience with system categorization processes
• Familiarity with supply chain risk management
• Experience presenting cybersecurity concepts to executive leadership
• Experience with cybersecurity metrics and reporting

Our Equal Employment Opportunity Policy

The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.

The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at [e-mail] or by calling 703-488-9377 to request accommodations.

Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.

Equal Opportunity Employer/Veterans/Disabled.Shareholder Preference in accordance with Public Law 88-352