Business Title Information Systems Security Manager; ISSM

Responsibilities

People Tec is seeking an Information Systems Security Manager (ISSM) for an opportunty to support our Colorado Springs, CO and Los Angeles, CA locations.

The Information Systems Security Manager (ISSM) serves as the senior cybersecurity leader responsible for the security posture, Risk Management Framework (RMF) activities, and cybersecurity compliance of assigned United States Space Force information systems. The ISSM leads a team of cybersecurity professionals and works closely with Program Managers, system owners, engineering teams, system administrators, Information Systems Security Officers (ISSOs), Information Systems Security Engineers (ISSEs), and government security authorities to ensure cybersecurity requirements are effectively implemented and maintained throughout the system lifecycle.

The successful candidate will provide technical and managerial leadership across system authorization, security control implementation, continuous monitoring, vulnerability management, cybersecurity risk assessment, configuration management, and compliance activities. The ISSM will oversee the development and maintenance of RMF authorization packages, evaluate cybersecurity risk, establish priorities for remediation activities, and ensure assigned systems maintain an appropriate security posture.

The ISSM will serve as a primary cybersecurity advisor to program and technical leadership and will represent the cybersecurity team during technical reviews, security assessments, authorization activities, and customer engagements. This position requires the ability to balance cybersecurity requirements with mission, engineering, schedule, and operational considerations while maintaining compliance with applicable USSF security requirements.

Duties:

• Lead cybersecurity and information assurance activities for assigned DoD information systems and programs.
• Provide technical leadership, direction, and oversight to ISSOs, ISSEs, and other cybersecurity personnel.
• Establish cybersecurity priorities, processes, and responsibilities across assigned systems and environments.
• Oversee development, maintenance, and continuous review of RMF authorization packages.
• Ensure applicable security controls are properly selected, implemented, documented, assessed, and maintained throughout the system lifecycle.
• Oversee cybersecurity documentation and artifacts within eMASS and other approved authorization systems.
• Review and approve system security documentation, including System Security Plans (SSPs), risk assessments, security procedures, control implementation statements, and supporting authorization artifacts.
• Lead cybersecurity risk assessments and provide risk-based recommendations to Program Managers, system owners, and government security authorities.
• Oversee vulnerability management, security configuration compliance, and remediation activities across assigned systems.
• Establish priorities for Plans of Action and Milestones (POA&Ms) and monitor findings through remediation and closure.
• Oversee continuous monitoring activities and evaluate changes in system security posture.
• Ensure cybersecurity requirements are incorporated into system design, implementation, modification, operation, and sustainment activities.
• Review proposed system changes and engineering modifications for cybersecurity and authorization impacts.
• Coordinate cybersecurity activities with system administrators, network engineers, software engineers, system engineers, and other technical disciplines.
• Support security-control assessments, authorization decisions, inspections, audits, and other cybersecurity reviews.
• Coordinate with government cybersecurity representatives, Authorizing Officials and their representatives, security control…