Information Systems Security Manager
Zachary Piper Solutions · Colorado Springs, CO · 5 days ago
On-siteInformation TechnologyFull-time
Responsibilities
- Lead Authority to Operate (ATO) efforts, including preparation, submission, and sustainment of accreditation packages
- Ensure compliance with DoD RMF, NIST SP 800-53, CNSSI, and other cybersecurity frameworks and directives
- Perform vulnerability assessments and risk analyses to support system authorization decisions
- Develop and maintain RMF documentation, including SSPs, SAPs, RARs, POA&Ms, and Continuous Monitoring Plans
- Cook up security assessments, system audits, and authorization activities with internal and external stakeholders
- Coordinate security assessments, system audits, and authorization activities with internal and external stakeholders
- Oversee incident response activities, including reporting, mitigation, and corrective action implementation
- Manage configuration control and security of hardware, software, and firmware within classified systems
Requirements
- Bachelor’s degree in Information Security, Cybersecurity, or related field (or equivalent experience); 7–9+ years of relevant experience
- Strong experience with RMF, NIST frameworks, CNSSI guidance, and system accreditation processes
- Background supporting classified environments, including SAP and/or SCI programs
- Active Top Secret clearance with SCI eligibility and willingness to undergo polygraph
- DoD 8140 IAT Level II certification (e.g., Security+, CISSP, or equivalent)
- Experience with system administration and security practices in Windows and Linux environments
- Knowledge of data handling procedures across classification levels, including secure transfer and labeling
Qualifications
Competitive based on experience
Full Benefits Package: PTO, Paid Holidays, Medical, Dental, Vision, 401K, Tuition Reimbursement, Paid Maternity Leave, Military Reserve Pay Offset
Keywords: ISSM, ISSO, RMF, NIST 800-53, CNSSI 1253, ATO, cybersecurity, information assurance, DoD, SAP, SCI, eMASS, XACTA, ACAS, Nessus, STIGs, Splunk, vulnerability assessment, incident response, continuous monitoring, POA&M, SSP, Colorado Springs, Top Secret Clearance