ISSM -South Dakota

Job Details:

Job Location:

Ellsworth, SD 57703, Position Type:
Full Time, Education Level: 4 Year Degree, Salary Range: $ - $ Salary, Job Category:
Information Technology,

The ISSM provides senior cybersecurity leadership and comprehensive RMF lifecycle support for systems within the DAF FM Authorizing Official boundary. The position serves as a senior advisor to the FM AO, AODR, and Program Offices; leads authorization and compliance engineering; oversees enterprise vulnerability and risk-management activities; maintains authorization artifacts in eMASS and ITIPS; and develops risk-informed decision packages, reports, policies, and leadership briefings

• Provide expert cybersecurity and RMF advisory support to the FM Authorizing Official (AO), Authorizing Official Designated Representative (AODR), and Program Offices across the DAF FM AO boundary.
• Analyze Federal, DoD, and Air Force cybersecurity policy and translate requirements into actionable implementation guidance for FM systems.
• Lead and oversee full RMF lifecycle support, including security control selection, implementation, validation, assessment support, authorization, and continuous monitoring.
• Develop, manage, review, and sustain required authorization artifacts, including System Security Plans (SSPs), Risk Assessment Reports (RARs), Plans of Action & Milestones (POA&Ms), and supporting evidence in eMASS and ITIPS for multiple systems.
• Conduct or oversee vulnerability assessments, risk analysis, and development of mitigation strategies across the FM portfolio.
• Coordinate vulnerability remediation with system owners and Program Management Offices and track enterprise-wide vulnerability trends and remediation status for FM leadership.
• Generate, review, and quality-control comprehensive A&A Decision Staff Packages containing risk analysis, control summaries, mission impact, and formal recommendations for ATO, ATO with Conditions, or Denial.
• Ensure A&A Decision Staff Packages are completed no later than 10 business days after receipt of a complete package from the PMO.
• Facilitate communication among system owners, security personnel, Program Offices, and the FM AO to resolve cybersecurity and information-assurance issues.
• Prepare and/or oversee AO Decision Support Briefings and Mission Impact Assessments for authorization decisions.
• Prepare and support leadership briefings, working groups, governance forums, and cybersecurity status updates.
• Review security-control assessment findings, identify gaps and weaknesses, assess associated risk, and recommend remediation strategies.
• Oversee monthly POA&M status reporting, including open items, closure rates, overdue actions, and risk trends across the FM AO boundary.
• Develop or oversee POA&M escalation reports for high-risk or significantly overdue items, including risk, mission impact, and recommended leadership action.
• Maintain or oversee the quarterly FM Systems Inventory & Boundary Document, including systems within the FM AO boundary, key contacts, authorization status, and ATO expiration dates.
• Develop, review, or update FM-level cybersecurity policies, SOPs, templates, checklists, and implementation guidance for Government review.
• Prepare or oversee the Annual Program Review briefing summarizing cybersecurity performance, major accomplishments, systemic risks, and strategic recommendations.
• Coordinate cybersecurity activities with infrastructure, database, systems administration, configuration management, and software engineering personnel when technical changes affect security posture or authorization status.
• Support Government…