Team Manager | Information Systems Security Officer (ISSO) | On-Site | Contingent

Ares Enterprise; Huntsville (AL); On-site; USD 120,000 - 160,000; Full time

Job summary

Ares Enterprise, LLC is seeking an experienced Team Manager / ISSO to lead performance and official ISSO responsibilities for a DoD program. The role interfaces with Government leadership, oversees all deliverables, and maintains continuous Authority to Operate under RMF guidelines to support critical Army operations.

The position requires extensive RMF experience, DoD security classifications, and strong program management skills to ensure secure, compliant IT environments across HQ and field

Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, Business Management, or related field.
• DoD 8570/8140 requirements for IAT Level II certifications (e.g., CISSP, Security+)
• 4+ years direct ISSO experience including RMF/A&A activities and eMASS workflows
• Active Top Secret/SCI clearance

Responsibilities

• Serve as the primary interface with Government Lead and stakeholders; manage program scope, schedule, budget and quality.
• Direct contractor activities, optimize resources, oversee staffing and risk mitigation.
• Execute full RMF lifecycle for enterprise eMASS portfolio; obtain and maintain ATOs.
• Develop and enforce COMSEC governance and reporting in line with AR 380-40, TB 380-41, AR 380-53.
• Provide cybersecurity training plans and workforce compliance initiatives.
• Produce regular program efficacy reports and drive continuous improvement.

Skills

Program management

RMF compliance

Stakeholder communication

Leadership

Security program development

Education

Bachelor’s degree in IT, cybersecurity, or related field

Tools

eMASS

ACAS/Nessus

SCAP

COMSEC governance

Job description

Description

Ares Enterprise, LLC is seeking an experienced Team Manager / Information System Security Officer (ISSO) to serve as the primary contractor lead for performance and official ISSO responsibilities. This pivotal role acts as the main liaison to government leadership (Program Manager, COR, and ISSM), oversees all deliverables, and ensures assigned systems maintain continuous Authority to Operate (ATO) under DoD and NIST Risk Management Framework (RMF) guidelines to a critical program that provides comprehensive mission support services for the U.S. Army and centers on delivering robust Information Technology compliance support, Risk Management Framework (RMF) lifecycle management, COMSEC governance, cybersecurity program development, and Tier 1 mission assurance support. The initiative ensures secure, continuous communications and business intelligence analysis across headquarters and enterprise-level enclaves to safeguard mission-critical intelligence for senior leaders and warfighters globally.

Job Type

Full-time

Key Responsibilities

• Program Oversight & Strategy: Serve as the primary interface with the Government Lead, keeping stakeholders informed of activities, risks, and performance metrics. Develop and execute a comprehensive Program Management Plan detailing scope, schedule, budget, and quality control.
• Resource & Financial Management: Direct contractor activities, optimize resource allocation, oversee staffing to prevent vacancies, assume full financial performance responsibility, and execute proactive risk mitigation.
• RMF & Compliance Management: Execute full lifecycle RMF compliance for the enterprise eMASS portfolio, streamline workflow approvals, validate security controls, and secure authorizations for system updates.
• Deliverable Quality: Ensure all contract deliverables are submitted on time and adhere to the highest standards of accuracy and quality.
• COMSEC Program Management & Governance: Support the development of the HQ AMC COMSEC program in compliance with AR 380-40, TB 380-41, and AR 380-53.
• Optimize workflows for device management, equipment procurement, setup, keying, maintenance, upgrading, and inventory recommendations while providing regular reports on program efficacy.
• Cybersecurity Program & Policy Development: Review external policies, guidance, standard operating procedures (SOPs), and regulations from the DoD, Department of the Army, and NIST to develop internal command plans and SOPs.
• Provide COMSEC governance and compliance reporting based on higher headquarters orders to secure encapsulation and encryption devices.
• Knowledge Management & Business Intelligence: Develop and maintain a comprehensive knowledge management plan to capture data, deliver business intelligence, and provide data analysis across all HQ AMC and subordinate MSC functions.
• Exercise Support & Security Validation: Provide exercise support to validate the security of systems accredited by the Authorizing Official and/or Privacy Official.
• Cybersecurity Training & Workforce Compliance: Develop technical and managerial cybersecurity training plans, guides, and materials to ensure workforce knowledge and compliance.
• Computing Environment Assessments: Perform and review technical cybersecurity assessments of computing environments to spot vulnerabilities, identify non-compliance with IA standards, and recommend tactical mitigation strategies. Conduct onsite visits, utilize approved discovery tools, and map mission enclaves to define authorization boundaries and update the Mission Assurance Decision Support System.

Minimum Qualifications

• Education: Bachelor’s degree from an accredited institution in Information Technology, Cybersecurity, Business Management, or a related field (or equivalent professional experience).
• Certifications: Current industry-standard certifications meeting DoD 8570/8140 requirements for IAT Level II (e.g., CISSP, CompTIA Security+, CCNA, RHCSA, MCSA). Program management certifications (such as a PMP) are a strong plus.
• Experience: Minimum of 8+ years of progressive experience managing complex IT programs for the Department of Defense (DoD). At least 4+ years of direct, hands-on ISSO experience, including preparing RMF authorization packages, managing eMASS workflows, navigating the A&A process, and remediating STIG findings.
• Technical Mastery: Demonstrated expertise with eMASS, vulnerability scanning tools (ACAS/Nessus), security compliance checkers (SCAP), network/system administration, COMSEC, and secure environment customer support.
• Security Clearance: Must possess and maintain an active Top Secret/SCI security clearance.