Information System Security Manager (ISSM)

Job Description

ProSource360 Consulting Services, Inc. is seeking an Information System Security Manager (ISSM) to serve as the senior cybersecurity lead for the Tri-Service Research Laboratory (TSRL). The ISSM oversees Risk Management Framework (RMF) implementation, Authority to Operate (ATO) maintenance, cybersecurity compliance, and security posture across NIPRNet, DREN, RDT&E, SIPRNet, and standalone systems and enclaves. The role provides technical and policy guidance to personnel, advises senior leadership and the Authorizing Official on cybersecurity risk, and helps ensure systems meet applicable DoD and federal security requirements.

Responsibilities

• Lead and coordinate RMF activities and support the granting and continued validity of ATOs in accordance with NIST SP 800-53 Rev. 5, CNSSI 1253, DoDI 8510.01, and related directives.
• Administer and track systems and enclaves in eMASS; maintain RMF package repositories and upload changes to ATO documentation within three business days.
• Prepare, review, and maintain System Security Plans, Security Assessment Reports, Plans of Action and Milestones (POA&Ms), risk assessments, topology diagrams, hardware/software inventories, and security procedures.
• Oversee vulnerability assessment and remediation activities using ACAS or other Air Force-approved tools; interpret findings and track corrective actions.
• Coordinate Security Technical Implementation Guide (STIG) hardening, Information Assurance Vulnerability Management (IAVM) reporting and compliance, configuration management reviews, audits, inspections, and Inspector General activities.
• Validate that administrative and technical personnel meet applicable DoD 8140 baseline certification and training requirements before elevated access is granted.
• Administer signed Privileged Access Agreements and conduct recurring audits of privileged accounts.
• Advise senior management and the Authorizing Official on cybersecurity risks, system security posture, and recommended mitigation actions.
• Ensure required cybersecurity training is completed and support account onboarding/offboarding, including DD Form 2875 routing.
• Support cybersecurity working groups, prepare metrics and briefings, and communicate cybersecurity matters to senior leaders and stakeholders.
• Support cloud cybersecurity strategy and enterprise IT pilot initiatives, including virtualization, collaboration systems, mobile technologies, cloud services, and automation.
• Coordinate quarterly media destruction and, when required, courier classified equipment or media within TSRL in accordance with security procedures.
• Assist with Memoranda of Agreement (MOAs), Memoranda of Understanding (MOUs), and Area of Responsibility (AOR) letters supporting the RMF Accreditation Program