Senior ISSM - RMF & Cybersecurity Program Lead

Bering Straits Native Corporation (BSNC); Colorado Springs (CO); On-site; USD 120,000 - 180,000; Full time

Job summary

Bering Straits Native Corporation in Colorado Springs seeks an Information System Security Manager (ISSM) to oversee cybersecurity, RMF compliance, and risk management across DoD- and Federal-linked information systems. You will lead a team of ISSOs/ISSEs, coordinate testing, authorizations, and policy development.

The role requires extensive RMF experience, DoD/Federal requirements knowledge, and the ability to brief leadership on risks.

Qualifications

• Bachelor's degree in a related technical field.
• 7+ years in cybersecurity or related disciplines.
• 3+ years in ISSM/leadership role in cybersecurity.
• Experience implementing RMF for DoD or Federal systems.
• Experience developing and maintaining ATO packages and documentation.
• Experience overseeing vulnerability management and compliance.

Responsibilities

• Oversee RMF compliance for assigned information systems and programs.
• Develop and manage the organization’s cybersecurity program to meet DoD/IC requirements.
• Lead RMF lifecycle activities including categorization, control implementation, assessment, authorization and continuous monitoring.
• Prepare, maintain, and submit SSPs, SARs, SCTMs, and POA&Ms.
• Advise leadership on cybersecurity risks and compliance requirements.
• Coordinate security testing, vulnerability scanning, and audits.
• Review system security configurations and security control changes.

Skills

RMF processes

Leadership

Communication

Policy writing

NIST standards

Risk management

Analytical thinking

Education

Bachelor's degree in Cybersecurity/IT/CS/Info Systems/Engineering

Tools

eMASS

Xacta

ACAS

Splunk

Microsoft 365

Job description

Bering Straits Native Corporation in Colorado Springs seeks an Information System Security Manager (ISSM) to oversee cybersecurity, RMF compliance, and risk management across DoD- and Federal-linked information systems. You will lead a team of ISSOs/ISSEs, coordinate testing, authorizations, and policy development.

The role requires extensive RMF experience, DoD/Federal requirements knowledge, and the ability to brief leadership on risks.