Information Systems Security Manager (ISSM)

About the role

Decision Technologies was founded to help bridge the gap between Department of Defense and Federal Government acquisition programs and technology to help our customers optimize their decision-making process. Over the years, our areas of expertise have expanded to include Systems Engineering, Program Management, In-Service Engineering, Equipment Repair, Research and Development, Test and Evaluation, and Intelligence and Counterintelligence Support. Our growth and success have positioned us as a premier engineering and intelligence services provider contributing to our nation's defense. Our company culture cultivates talented problem-solvers focused on performance with industry-leading teamwork and responsiveness. We have established a reputation for offering superior services and solutions, proven integrity and innovation, employee engagement and development, and customer collaboration.

The Information System Security Manager (ISSM) is responsible for providing cybersecurity oversight, governance, and compliance management for the organization’s SIPRNet circuit and associated classified information systems. This role ensures full compliance with DoD, IC, and federal cybersecurity requirements, maintains system accreditation, and leads security operations supporting mission-critical classified environments. Position located in Austin, TX.

Responsibilities

• Lead and manage the cybersecurity program for the SIPR circuit and all connected classified systems.
• Ensure full compliance with DoD, Intelligence Community, and federal cybersecurity policies including RMF, NIST SP 800-53, CNSSI 1253, and applicable DoD instructions.
• Oversee the development, documentation, review, and maintenance of RMF artifacts including SSPs, CONOPS, POA&Ms, SARs, and continuous monitoring records within eMASS.
• Conduct or supervise risk assessments, vulnerability evaluations, and threat analysis.
• Identify residual risks and recommend appropriate mitigation strategies.
• Maintain the system’s Authorization to Operate (ATO) and ensure all continuous monitoring requirements are met.
• Review and approve security-relevant configuration or software changes affecting the SIPR network.
• Validate implementation of STIGs, configuration baselines, security patches, and vulnerability remediation.
• Coordinate with network administrators, ISSOs, engineers, and security teams to ensure system hardening and compliance activities are executed correctly.
• Ensure proper handling, transmission, and storage of classified data.
• Validate appropriate boundary protection mechanisms, enclave configurations, and physical security requirements for SIPR systems.
• Maintain accurate, auditable security documentation and system records.
• Prepare required cybersecurity reports for inspections, audits, and system reviews.
• Lead remediation efforts addressing audit findings, compliance gaps, and security vulnerabilities.
• Manage cybersecurity incident response procedures for the SIPR environment.
• Coordinate reporting to government authorities as required by DoD policy.
• Oversee account management, auditing, and access control enforcement.
• Ensure all SIPR users complete required cybersecurity training and understand proper classified handling procedures.
• Brief leadership, participate in meetings, and engage with auditors, AOs/DAOs, and other cybersecurity stakeholders.
• Communicate technical security issues clearly to both technical and non-technical audiences.

Qualifications

Technical Knowledge

• Deep understanding of DoD SIPRNet architecture and classified network handling rules.
• Proficiency in network security principles including firewalls, IDS/IPS, encryption technologies, and cross-domain constraints.
• Experience managing secure enclaves, boundary protections, and classified physical security requirements.
• Hands-on experience with vulnerability scanning and auditing tools such as ACAS/Nessus.

RMF & Security Governance

• In-depth knowledge of DoD Risk Management Framework lifecycle.
• Strong ability to create, review, and maintain RMF control evidence and accreditation documentation.
• Experience interacting with AOs, cybersecurity compliance teams, and inspection authorities.

Soft Skills

• Excellent written and verbal communication skills.
• Ability to prepare and deliver leadership briefings.
• Highly organized, detail-oriented, and capable of managing multiple concurrent tasks.

Certifications

• DoD 8570/8140 IAM Level II or III (e.g., CAP, CISSP, CASP+, CISM, GSLC, or equivalent).

Education & Experience

• Bachelor’s degree from an accredited university, OR CNSSI 4012 certificate OR ADQ GA7.3–5 years of experience as an ISSM, ISSO, or similar cybersecurity leadership role.

Skills

Preferred/Additional Training

• NEC 2779 (CIN: A‑531‑0009)
• NEC 3372 (CIN W‑3B‑1500, EKMS Manager)
• A‑4C‑1340 (KMI)

Technical Tools Experience

• ACAS, Nessus, audit tools, and configuration management systems.

Schedule

Travel requirements: less than 10%.

Pay

The pay range for this role is $115,000 – $130,000 USD per year (Austin, TX). Compensation is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements.

Benefits

• Competitive Paid Time Off
• Comprehensive Medical