USAF - Information Systems Security Manager (ISSM)
On-siteEllsworth, Maine, United States
Job Summary
Provide senior cybersecurity management and governance across the DAF FM portfolio, ensuring consistent, compliant execution of the RMF lifecycle. Advise the FM Authorizing Official, AODR, program offices, and senior leadership on cybersecurity policy, risk posture, and authorization strategy. Analyze federal, DoD, and Air Force policies to establish actionable implementation direction and oversee security control selection, assessment, validation, and continuous monitoring. Lead portfolio-level vulnerability and risk management, including assessment strategy, mitigation planning, and escalation of high-risk conditions. Coordinate remediation efforts with system owners, ISSOs, analysts, engineers, and program management offices while monitoring authorization status and artifact currency. Review and approve cybersecurity documentation for technical accuracy and decision readiness, and facilitate resolution of information-assurance issues. Lead cybersecurity status briefings, annual program reviews, and governance forums to support ATO decisions and mission continuity activities.
Required Qualifications
- Active TS/SCI SSBI clearance
- B.S. Computer Science, Information Technology, or a related field
- 10+ years of RMF/Cybersecurity experience
- Advanced experience serving as an ISSM or equivalent cybersecurity manager for federal or DoD systems and complex authorization boundaries
- Expert knowledge of RMF, Assessment and Authorization, continuous monitoring, security-control assessment, vulnerability management, POA&M governance, and authorization decision support
- Expert ability to interpret federal, DoD, and Air Force cybersecurity requirements and translate them into enforceable technical and program guidance
- Demonstrated experience overseeing SSPs, RARs, POA&Ms, control evidence, assessment reports, system inventories, authorization packages, and Mission Impact Assessments
- Strong proficiency with eMASS and ITIPS or comparable federal authorization and portfolio-management systems
- Experience directing vulnerability assessments, risk analysis, mitigation planning, remediation validation, trend reporting, and executive risk escalation
- Demonstrated ability to advise Authorizing Officials and senior leaders and to provide clear, defensible recommendations involving mission, operational, and cybersecurity risk
- Experience leading cybersecurity personnel, assigning and reviewing work, enforcing quality standards, and coordinating across technical and program-management disciplines
- Exceptional leadership, stakeholder-management, analytical, technical-writing, briefing, governance, and decision-support skills
- Ability to manage concurrent system authorization actions and recurring PWS deliverables while maintaining artifact currency and meeting deadlines
- Active DoD 8570 IAM Level III and DoD 8140 System Administrator certification
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.