F-35 Information System Security Manager (ISSM) | Eglin AFB, FL (Senior)

About the Role

This Information System Security Manager (ISSM) position leads the F-35 cybersecurity program at Eglin AFB, FL and oversees Information System Security Officer(s) (ISSO) in developing, maintaining, and managing the cybersecurity of assigned classified and/or unclassified F-35 systems.

Assigned systems may vary in classification, capabilities, and complexity. Mission requirements may require other than first-shift work and additional responsibilities as assigned.

Responsibilities

• Drive the development, review, and adherence of the site’s F-35 cybersecurity program, including related policies, plans, and procedures for assigned systems.
• Lead and manage assigned ISSO(s) in the successful execution of the site’s F-35 cybersecurity program, including assuming ISSO responsibilities in their absence.
• Ensure the implementation and assessment of required cybersecurity controls as defined by the system authorization body of evidence for assigned systems.
• Serve as the incident response focal point: ensure timely and accurate communication, documentation, investigation, response, and closure of cyber incidents.
• Ensure POA&Ms or remediation plans are in place for vulnerabilities identified during monitoring, audits, or inspections, and implement or oversee corrective actions.
• Create, collect, and retain data to meet reporting requirements.
• Monitor and recognize non-compliance, anomalous activity, and effectively report and track such activity and associated risks.
• Conduct self-inspections and prepare for customer inspections.
• Interact professionally during the enforcement of security policies and procedures.
• Lead compliance efforts for governing documents and security policies, and assist in regulatory periodic assessments.
• Implement and test state-of-the-art secure operating systems, networks, and database solutions.
• Stay current with system vulnerabilities and provide security training to system users.
• Conduct risk assessments and provide recommendations for secure implementation and compliance with government regulations and cybersecurity guidelines.
• Create, maintain, and submit information system security documents and reports to regulatory agencies.
• Assess and mitigate system security threats/risks throughout the program lifecycle; validate system security requirements; establish system security documentation; assist with security procedure implementation.
• Verify information system security requirements; perform certification and accreditation planning, testing, assessing, and liaison activities.
• Apply information assurance/cybersecurity standards, directives, guidance, and policies to an architectural/risk-based framework.
• Provide architectural/risk-based analysis of cybersecurity features and relate existing systems to future needs, trends, and requirements.

Requirements

• Final Transferable Secret security clearance; last Periodic Reinvestigation must be within the last five (5) years or enrollment in Continuous Vetting program.
• Ability to obtain and maintain Special Access Program (SAP) access.
• Expertise in cybersecurity with a track record of leading technical teams to deliver complex projects using artifact-backed solutions based on independent analysis.
• Excellent communication, facilitation, and stakeholder management skills.
• Ability to translate technical concepts into operationally relevant language.
• Possess a valid certification that meets or exceeds DoD 8570.01-M IAM II requirements (e.g., CASP+ CE, CGRC, CISM, CISSP (or Assc), GSLC, CCISO, HCISPP).
• Prior experience in a cyber workforce role, as categorized by the NICE or DoD workforce frameworks.

Desired Skills

• Prior experience as an ISSO, ISSM, or related DoD Cyber Workforce Role on one or more F-35 information systems.
• Prior experience ensuring compliance with applicable laws, regulations, guidance, and policies related to DoD cybersecurity and SAPs (e.g., DoDI 8510.01, JSIG, DoDM 5205.07, NIST SP 800 series).
• Familiarity with F-35 product lifecycle management and sustainment operations, including the system authorization process and associated artifacts (e.g., SSP, SCTM, Security CONOPs, SOPs).
• Experience using and configuring cyber SIEM and compliance tools (e.g., Splunk, Tenable).

Pay

Full-Time Salary Range: $116,100.00 - $215,700.00

Annual short-term and/or long-term incentive compensation programs may be offered depending on the position. Payments under these programs are not guaranteed and can vary based on performance metrics.

Benefits

• Medical, Dental, and Vision coverage.
• Flexible work arrangements and schedules (e.g., 4x10 workweek).
• 401(k) match.
• Paid time off, holidays, and parental leave.
• Employee Assistance Program (EAP).
• Flexible Spending Accounts.
• Education Assistance.
• Life Insurance, Short-Term Disability, and Long-Term Disability.

For Washington state applicants only:

• Non-represented full-time employees accrue at least 10 hours per month of Paid Time Off (PTO) for incidental absences and receive at least 90 hours for holidays.
• Represented full-time employees accrue 6.67 hours of Vacation per month, up to 52 hours of sick leave annually, and receive at least 96 hours for holidays.