Information System Security Manager (ISSM) II

Location: Hanscom AFB, MA

Security Clearance: Active TS/SCI (must obtain CI Poly)

Job Type: Full‑Time

Target Salary Range: $151,500 – $152,000

Position Overview

The Information System Security Manager (ISSM) serves as a principal advisor on all matters, technical and otherwise, involving the security of information systems under their purview. The position provides primary support within Special Access Programs (SAPs) supporting Department of Defense (DoD) agencies, including HQ Air Force, the Office of the Secretary of Defense, and Military Compartment efforts. The ISSM provides day‑to‑day support for Collateral, Sensitive Compartmented Information (SCI), and Special Access Program (SAP) activities.

Responsibilities

• Perform oversight of the development, implementation, and evaluation of information system security program policy, with special emphasis on integrating existing SAP network infrastructures.
• Develop and oversee operational information systems security implementation policies and network security guidelines based on the Risk Management Framework (RMF), emphasizing the Joint Special Access Program Implementation Guide (JSIG) authorization process; advise customers on RMF assessment and authorization issues.
• Develop and maintain a formal Information Systems Security Program; ensure system security requirements are addressed throughout the system life cycle and that valid authorizations are obtained for all authorization boundaries.
• Assess changes in systems, environments, and operational needs that could affect authorizations; conduct periodic assessments of security posture and ensure documentation is current and accessible.
• Perform risk assessments and provide recommendations to DoD agency customers; advise program managers on security testing methodologies; evaluate authorization documentation and develop, review, and endorse actions for Authorizing Officials.
• Develop and execute security assessment plans to verify required features and assurances; review AIS assessment plans; evaluate threats and vulnerabilities and recommend additional safeguards.
• Institute and implement a Configuration Control Board (CCB) charter; manage configuration changes for software, hardware, and firmware; ensure procedures for clearing, sanitizing, and destroying hardware and media; maintain a repository for authorization documentation and define data ownership, access rights, and handling requirements.
• Develop policies and procedures for responding to security incidents; ensure proper protection or corrective measures are taken; conduct periodic testing of security posture using intrusion detection and monitoring tools in coordination with ISSOs.
• Ensure Information Assurance Officers, network administrators, and cybersecurity personnel receive necessary technical and security training; develop and implement an information security education, training, and awareness program, including delivering local cybersecurity training.
• Coordinate with Personnel Security Officer or cognizant security official on approval of external information systems; develop Assured File Transfers (AFT) per JSIG; participate in self‑inspections.
• Develop and monitor system recovery and reconstitution processes to ensure authorization boundaries can be recovered based on availability level determinations.
• Perform duties of the Information System Security Officer (ISSO) when one is not present or available.

Qualifications

• Active TS/SCI clearance with ability to obtain a CI Poly.
• Bachelor’s degree (or four years of additional experience in lieu of a degree).
• 7–9 years of related experience, including prior performance in roles such as ISSO or ISSM.
• Experience with Special Access Programs (SAP).
• IAT Level II or IAM Level II certification.

Pay

Target Salary Range: $151,500 – $152,000

Schedule

Full‑Time