Information System Security Manager (ISSM)

Bering-Alaka`ina Holdings, LLC is looking for an Information Systems Security Manager (ISSM) for our customer located at Creech AFB in Indian Springs, Nevada. The ISSM provides dedicated strategic cybersecurity leadership and oversight for designated classified information system enclaves supporting the 25th Attack Group (25 ATKW).

About the role

The ISSM focuses exclusively on system-level cybersecurity governance, Risk Management Framework (RMF) compliance, and continuous monitoring to achieve and maintain Authorizations to Operate (ATO). The ISSM serves as the primary cybersecurity technical advisor to the Government Authorizing Official (AO), Program Manager (PM), and Information System Owner (ISO).

Responsibilities

• Serve as the formally appointed Information Systems Security Manager (ISSM) for up to four contractor managed Information Systems (including RPA Low, ACN, Audio MLS, and RPA High), overseeing the full lifecycle of cybersecurity compliance and system accreditation in accordance with DoDI 8510.01, AFI 17 101 (RMF), and AFMAN 17-1301 (COMPUSEC).
• Develop, maintain, and oversee authorization documentation, System Security Plans (SSPs), risk assessments, and continuous monitoring activities using both eMASS and Xacta workflow platforms.
• Act as the primary interface with Government Authorizing Officials (AOs) and Security Control Assessors (SCAs) to present risk assessments, initiate ATO packages, manage Plan of Action and Milestones (POA&Ms), and secure timely renewals.
• Maintain rigorous oversight of vulnerability management, incident reporting, access control governance, and configuration management functions across assigned enclaves.
• Provide oversight and guidance to subordinate cybersecurity personnel (ISSOs) to ensure security control implementation and mitigation efforts align with established baselines and mission requirements.
• Provide contingency continuity support for tactical enclave cybersecurity (ISSO) activities during periods of workforce shortfalls or as critical mission needs dictate.
• Report conditions that materially affect system authorization status or cybersecurity posture directly to the Government, translating technical risk into actionable mission risk.
• Initiate exceptions, deviations, or waivers to cybersecurity requirements when operational impacts dictate, ensuring complete documentation and coordination with the AO.
• Ensure all assigned personnel and systems remain compliant with applicable DoW/DoD 8140 cybersecurity workforce requirements.
• Perform all other position related duties, as assigned, or requested.

Work Environment

• Typical office environment with no unusual hazards.
• Occasional lifting of 20 pounds, kneeling, standing, and walking.
• Routinely sitting and constant use of speech/hearing abilities for communication.
• Constant mental alertness, and must be able to work under deadlines.

Requirements

• A BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, Computer Science, or equivalently relative discipline, from an ABET accredited or CAE designated institution.
• Active DoD 8140 / DoDI 8570.01-M IAM Level II or III Certification matched to ISSM responsibilities prior to hiring.
• Must possess and maintain a valid state-issued driver’s license.
• Minimum three to five (3-5) years of dedicated experience in RMF package development, continuous monitoring, and acting as an ISSM or lead ISSO.
• Demonstrated proficiency in navigating and managing ATO packages within both eMASS and Xacta.
• Experience with STIGs, SCAP, vulnerability scanning, and ACAS/NESSUS.
• Knowledge of cybersecurity laws, regulations, policies, governance, and technical safeguards governing the use, processing, storage, and transmission of classified information.
• Exceptional communication skills, with the ability to confidently brief senior government leadership (AOs, SCAs, PMs) on cyber risk posture.
• U.S. Citizenship is required.
• Active Top Secret Clearance with the ability to obtain and maintain SCI access.

Qualifications

• Master’s degree in a Cybersecurity or related field.
• Experience with COMSEC accounts.
• Understanding of GSA approved security containers and locks.

Pay

$118,327.00

Benefits

• Competitive salaries.
• 401K plan with company match.
• Medical, dental, disability, and life insurance coverage.
• Tuition reimbursement.
• Paid time off.
• 11 paid holidays.