Information Systems Security Manager (ISSM)

Decision Technologies seeks a qualified Information System Security Manager (ISSM) to join our team in Austin, TX.

Position Description:

The Information System Security Manager (ISSM) is responsible for providing cybersecurity oversight, governance, and compliance management for the organization’s SIPRNet circuit and associated classified information systems. This role ensures full compliance with DoD, IC, and federal cybersecurity requirements, maintains system accreditation, and leads security operations supporting mission-critical classified environments.

Active Secret or TS/SCI (as required by the position/organization)

Responsibilities and Duties:

Cybersecurity Program Leadership

• Lead and manage the cybersecurity program for the SIPR circuit and all connected classified systems.
• Ensure full compliance with DoD, Intelligence Community, and federal cybersecurity policies including RMF, NIST SP 800-53, CNSSI 1253, and applicable DoD instructions.

Risk Management & Compliance

• Oversee the development, documentation, review, and maintenance of RMF artifacts including SSPs, CONOPS, POA&Ms, SARs, and continuous monitoring records within eMASS.
• Conduct or supervise risk assessments, vulnerability evaluations, and threat analysis.
• Identify residual risks and recommend appropriate mitigation strategies.
• Maintain the system’s Authorization to Operate (ATO) and ensure all continuous monitoring requirements are met.

System Hardening & Change Management

• Review and approve security-relevant configuration or software changes affecting the SIPR network.
• Validate implementation of STIGs, configuration baselines, security patches, and vulnerability remediation.
• Coordinate with network administrators, ISSOs, engineers, and security teams to ensure system hardening and compliance activities are executed correctly.

Boundary & Data Protection

• Ensure proper handling, transmission, and storage of classified data.
• Validate appropriate boundary protection mechanisms, enclave configurations, and physical security requirements for SIPR systems.

Audit, Inspection, & Documentation

• Maintain accurate, auditable security documentation and system records.
• Prepare required cybersecurity reports for inspections, audits, and system reviews.
• Lead remediation efforts addressing audit findings, compliance gaps, and security vulnerabilities.

Incident Response & Monitoring

• Manage cybersecurity incident response procedures for the SIPR environment.