ISSM (PL)

Canvas; Eglin Air Force Base (FL); On-site; USD 120,000 - 160,000; Full time

Job summary

Canvas is seeking a senior cybersecurity leader to oversee RMF/JSIG compliance for DoD/AF systems at Eglin AFB. You will manage ATO packages, control access, and drive continuous monitoring to maintain a strong security posture.

You will coordinate audits, incident response, and translation of security requirements into actionable guidance while mentoring engineers and IT staff on robust security practices.

Qualifications

• Experience managing cybersecurity for Air Force or DoD information systems.
• In-depth RMF, JSIG, NIST 800-53, DoDI 8500.01, DoDM 8140.03 knowledge.
• Proficiency with security tools, vulnerability assessment, and incident response.
• Strong analytical, organizational, and communication skills.
• Ability to lead multidisciplinary teams and manage complex security projects.

Responsibilities

• Lead development, implementation, and maintenance of security plans aligned with federal mandates and DoD directives.
• Oversee the full cybersecurity lifecycle and ATO package for assigned systems per RMF/JSIG.
• Manage user access, ensuring proper clearances and need-to-know verification.
• Coordinate external audits, incident response, and translate requirements into guidance.
• Provide security awareness oversight and training for system users.
• Evaluate threats, ensure compliance with SCGs, and support security architecture docs.
• Collaborate with engineers and IT to integrate security requirements into architectures.

Skills

RMF

JSIG

NIST 800-53

Security

Incident response

Vulnerability assessment

Clearance

Leadership

Air Force/DoD IS

Certifications

Education

Master’s degree in Cybersecurity/Info Assurance/CS

18+ years experience with related degree

12 years experience in lieu of Master’s

Job description

Key Responsibilities

• Lead the development, implementation, and maintenance of comprehensive security plans, policies, and procedures aligned with federal mandates (e.g., FISMA, NIST frameworks), DoD, and Air Force directives.
• Oversee the full cybersecurity lifecycle and Authorization to Operate (ATO) package for assigned systems, ensuring compliance with Risk Management Framework (RMF) and/or Joint Special Access Program Implementation Guide (JSIG) requirements.
• Manage user access, ensuring proper clearances, authorization, and need-to-know are verified.
• Oversee the implementation and validation of security controls, perform continuous monitoring activities, and maintain the system's security posture.
• Coordinate and support external audits, incident response efforts, and the translation of security requirements into actionable guidance.
• Provide oversight of security awareness and training initiatives for system users.
• Evaluate threats and vulnerabilities, ensure compliance with security regulations and Security Classification Guides (SCGs), and support the development of security architecture documentation.
• Collaborate with engineers, IT professionals, and stakeholders to ensure seamless integration of security requirements into system architectures and operations.
• Prepare and present reports, briefings, and recommendations to leadership and stakeholders.

Desired Skills & Qualifications

• Demonstrated experience managing cybersecurity and information assurance for Air Force or DoD information systems.
• In-depth knowledge of RMF, JSIG, NIST 800-53, DoDI 8500.01, DoDM 8140.03, and other relevant standards.
• Proficiency in security tools, vulnerability assessment, and incident response processes.
• Strong analytical, organizational, and communication skills.
• Ability to lead multidisciplinary teams and manage complex security projects.
• Relevant professional certifications (e.g., CISSP, CISM, Security+) are highly desirable.

Clearance And Education Requirements

• US Citizen
• Must possess or be able to obtain and maintain a Top Secret Clearance.
• Master’s degree in Cybersecurity, Information Assurance, Computer Science, or a related field and at least 10 years of relevant experience; OR
• Bachelor’s degree in a related field and at least 18 years of relevant experience (substituting 8 years for the Master’s); OR
• 12 years of relevant experience (in lieu of a Master’s degree)