ISSM

Koniag IT Systems, LLC a Koniag Government Services company, is seeking an ISSM Consultant with a Top
- Secret security clearance to support KITS and our government customer. We will consider candidates in the following areas:
Las Vegas, NV, Albuquerque, NM, Germantown, MD or Washington DC. This is an On-Site position.

Benefits include:

• medical, dental, and vision insurance
• 401(k) retirement plan
• paid time off
• paid parental leave
• life and disability insurance
• flexible spending accounts
• commuter benefits
• tuition reimbursement

Koniag IT Systems is seeking an experienced Information System Security Manager (ISSM) to support the Department of Energy's National Nuclear Security Administration (DOE NNSA). The ideal candidate will have strong expertise in cybersecurity risk management, security authorization processes, and compliance with federal security requirements. This position requires a professional who can effectively manage system authorization activities while ensuring adherence to the Risk Management Framework (RMF).

Candidates must meet NNSA and/or DoD 8140 training requirements and experience levels and be eligible for the appropriate security clearance.

Essential Functions, Responsibilities & Duties may include, but are not limited to:
The ISSM will be responsible for ensuring that federal and program cybersecurity requirements are implemented as needed, including executing activities related to the Risk Management Framework (RMF). Principal responsibilities include:

Authorization

Activities:

• Ensure system, application, and hardware authorization activities such as Information System Security Plans (ISSPs), Risk Assessments, and Security Baselines are completed in a timely and accurate manner
• Manage both initial authorization and re-authorization processes for information systems
• Develop comprehensive authorization packages and submit them to appropriate stakeholders for review
• Submit finalized authorization packages to the Authorizing Official (AO) or Authorizing Official Designated Representative (AODR) for review and approval upon ISSM clearance

Maintenance

Activities:

• Maintain current knowledge of AO-approved risk boundaries and risk tolerance levels
• Update authorization documentation at organizationally defined frequencies in accordance with the risk management objectives of the organization
• Ensure continuous monitoring of security controls and implementation of necessary updates

Approval and Management:

• Approve operations only when covered within existing authorizations
• Ensure all decisions support the Authorizing Official and maintain full transparency
• Actively manage and coordinate onboarding and termination processes for contractor personnel
• Ensure all work products and deliverables meet Enterprise Cybersecurity Program requirements and adhere to quality standards
• Provide strategic support at meetings, briefings, and presentations as needed
• Work, coordinate, and maintain productive working relationships with other contractors supporting NA-IM and NNSA

Education and Experience:

Required:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field
• Minimum of 7+ years of experience in cybersecurity or information security
• Minimum of 5+ years of experience with RMF or similar security authorization frameworks
• Experience as an ISSM or equivalent position managing security authorization processes
• Experience developing and maintaining security documentation including ISSPs, Risk Assessments, and Security Baselines
• Experience working with federal agencies, particularly DOE, NNSA, or Department of Defense
• Training and experience that meets NNSA and/or DoD 8140 requirements (or equivalent)

Required Skills and

Competencies:

• Comprehensive knowledge of the NIST Risk Management Framework (RMF)
• Strong understanding of federal cybersecurity regulations, policies, and standards
• Proficiency with security authorization documentation and processes
• Experience with risk assessment methodologies and practices
• Knowledge of security control implementation and assessment
• Strong project management skills with ability to manage multiple authorization projects simultaneously
• Excellent documentation skills and attention to detail
• Superior communication skills, both written and verbal
• Ability to effectively interface with senior leadership, technical staff, and contractors
• Experience with continuous monitoring and ongoing authorization processes
• Knowledge of incident management and reporting requirements Understanding of NNSA and DOE security…