Information Systems Security Manager - Basic (IFMC)

About the role

As the Information Systems Security Manager, you will support a Cyber Compliance Team providing ISSM‑Basic support for tactical systems. You will be a key member of a team performing hardware and software cybersecurity analysis and supporting the Risk Management Framework (RMF) Assessment and Authorization (A&A) process for data processing, test, and tactical systems. You will prioritize competing requirements for time and resources and adjudicate resource needs based on understanding of government customer and mission needs.

Responsibilities

• Provide accurate technical evaluations of equipment, software applications, full systems, or networks and document the security posture, capabilities, and vulnerabilities against applicable NIST controls.
• Select and assess security controls, complete accreditation packages timely, formulate and implement mitigations, and maintain the security posture of systems.
• Have experience with eMASS and initiating, updating, and maintaining RMF packages.
• Identify, assess, and make risk mitigation recommendations; document system security threats/risks throughout a system's lifecycle; validate system security requirements; formulate and maintain documentation and system certification and accreditation activities (planning, testing, assessing, coordinating).
• Work with system developers to update, maintain, and track RMF and POA&M documentation.
• Document preliminary or residual security risks for system operation and manage and approve Authorization Packages.
• Monitor and evaluate a system's compliance with DoD security, resilience, and dependability requirements; perform validation steps, compare actual results with expected results, and analyze differences to identify impacts and risks at the software application, system, and network levels.
• Work with teams to provide solutions and ensure continued functionality of systems within the DoD RMF Framework.

Required Skills / Experience

• U.S. Citizen
• Must possess and maintain a US Secret security clearance (Top Secret, SCI eligible is a plus).
• Meet DoDD 8140 ISSM‑Basic certification, education, and experience compliance.
• Associate’s degree in Engineering, IT, or a Cyber‑related field.
• Experience implementing and evaluating DoD STIG requirements, NIST RMF, IAVMs, and cybersecurity assessment tools (ACAS, Nessus, SCC, STIG Viewer).
• Knowledge of the Risk Management Framework (RMF) process and NIST security controls.
• Knowledge of information system architecture and standards as they apply to cyber security.
• Knowledge of NIST SP 800‑160, Systems Security Engineering.

Preferred Skills / Experience

• Bachelor’s degree in Engineering, IT, or a Cyber‑related field.
• Strong desire to contribute to overall team success.
• Excellent written and oral communication skills.
• High degree of proficiency in MS Office Suite.