ISSM (PL)

Canvas, Inc.; Florida; On-site; USD 120,000 - 180,000; Full time

Job summary

Canvas, Inc. seeks an experienced Information System Security Manager (ISSM) to lead the development, implementation, and maintenance of security plans for Air Force and DoD information systems at Eglin AFB.

You will oversee RMF/JSIG compliance, risk assessments, and the Authorization to Operate process. The role requires TS clearance, a relevant master’s or bachelor’s with years of experience, and strong communication with engineering teams.

Qualifications

• Demonstrated experience managing cybersecurity for Air Force or DoD information systems.
• In-depth knowledge of RMF, JSIG, NIST 800-53, DoDI 8500.01, DoDM 8140.03, and other relevant standards.
• Proficiency in security tools, vulnerability assessment, and incident response processes.
• Strong analytical, organizational, and communication skills.
• Ability to lead multidisciplinary teams and manage complex security projects.
• Relevant professional certifications (e.g., CISSP, CISM, Security+) are highly desirable.

Responsibilities

• Lead development, implementation, and maintenance of security plans, policies, and procedures aligned with federal mandates.
• Oversee RMF/JSIG compliance and ATO packaging for assigned systems.
• Manage user access controls and ensure proper clearances and need-to-know.
• Coordinate external audits, incident response, and security awareness initiatives.
• Develop security architecture documentation and integrate requirements into system designs.

Skills

RMF/JSIG knowledge

NIST 800-53

Security tools & incident response

Clearance management

Analytical & strategic thinking

Leadership & team coordination

Communication

Security architecture

Certifications (CISSP/CISM/Security+)

Education

Master’s degree in Cybersecurity or related field

Bachelor’s degree in related field

Tools

RMF tooling

Security assessment tools

Job description

## ISSM (PL)Apply: Eglin AFB, FL: Full time: Posted Yesterday: JR100886### **Key Responsibilities*** Lead the development, implementation, and maintenance of comprehensive security plans, policies, and procedures aligned with federal mandates (e.g., FISMA, NIST frameworks), DoD, and Air Force directives.* Oversee the full cybersecurity lifecycle and Authorization to Operate (ATO) package for assigned systems, ensuring compliance with Risk Management Framework (RMF) and/or Joint Special Access Program Implementation Guide (JSIG) requirements.* Manage user access, ensuring proper clearances, authorization, and need-to-know are verified.* Oversee the implementation and validation of security controls, perform continuous monitoring activities, and maintain the system's security posture.* Coordinate and support external audits, incident response efforts, and the translation of security requirements into actionable guidance.* Provide oversight of security awareness and training initiatives for system users.* Evaluate threats and vulnerabilities, ensure compliance with security regulations and Security Classification Guides (SCGs), and support the development of security architecture documentation.* Collaborate with engineers, IT professionals, and stakeholders to ensure seamless integration of security requirements into system architectures and operations.* Prepare and present reports, briefings, and recommendations to leadership and stakeholders. ### **Desired Skills & Qualifications*** Demonstrated experience managing cybersecurity and information assurance for Air Force or DoD information systems.* In-depth knowledge of RMF, JSIG, NIST 800-53, DoDI 8500.01, DoDM 8140.03, and other relevant standards.* Proficiency in security tools, vulnerability assessment, and incident response processes.* Strong analytical, organizational, and communication skills.* Ability to lead multidisciplinary teams and manage complex security projects.* Relevant professional certifications (e.g., CISSP, CISM, Security+) are highly desirable. ### **Clearance and Education Requirements*** **US Citizen*** Must possess or be able to obtain and maintain a **Top Secret** Clearance.* Master’s degree in Cybersecurity, Information Assurance, Computer Science, or a related field **and** at least 10 years of relevant experience; **OR** + Bachelor’s degree in a related field **and** at least 18 years of relevant experience (substituting 8 years for the Master’s); **OR** + 12 years of relevant experience (in lieu of a Master’s degree)