Senior ISSM RMF Cybersecurity Leader for DoD Programs

Bering Straits Native Corporation; Colorado Springs (CO); On-site; USD 120,000 - 160,000; Full time

Job summary

Bering Straits Native Corporation seeks an Information System Security Manager (ISSM) in Colorado Springs to lead the cybersecurity program and RMF activities for DoD and federal systems. You will oversee SSPs, SARs, and POA&Ms, and advise senior leaders on risk and compliance.

The role requires strong leadership, communication, and technical skills to coordinate ISSOs, ISSEs, and cybersecurity staff, ensuring continuous monitoring and secure configurations across classified/unclassified

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS or related field; additional experience may substitute education.
• 7+ years in cybersecurity, IA, or related tech disciplines.
• 3+ years in ISSM/ISSO or cybersecurity management role.
• Experience RMF for DoD or Federal systems and ATO packages.

Responsibilities

• Oversee RMF and information assurance activities for assigned systems.
• Lead development and maintenance of SSPs, SARs, SCTMs, and POA&Ms.
• Advise leadership on cybersecurity risks and compliance requirements.
• Coordinate security testing, vulnerability scans, audits, and incident response.
• Supervise ISSOs/ISSEs and cybersecurity personnel.
• Ensure compliance with NIST, DoD, CNSSI policies and directives.

Skills

RMF leadership

NIST standards

Cybersecurity governance

Vulnerability management

Incident response

Security architecture

Education

Bachelor's degree in Cybersecurity or related field

Tools

ACAS

Xacta

Splunk

HBSS

Job description

Bering Straits Native Corporation seeks an Information System Security Manager (ISSM) in Colorado Springs to lead the cybersecurity program and RMF activities for DoD and federal systems. You will oversee SSPs, SARs, and POA&Ms, and advise senior leaders on risk and compliance.

The role requires strong leadership, communication, and technical skills to coordinate ISSOs, ISSEs, and cybersecurity staff, ensuring continuous monitoring and secure configurations across classified/unclassified