Information System Security Manager; ISSM), EPASS HB - Us-Ut-Ogd Security Clearance

Position: Information System Security Manager (ISSM), EPASS HB - US-UT-Ogd with Security Clearance
Information System Security Manager (ISSM) Location US-UT-Ogden Employment Status Full time Information System Security Manager
Information System Security Manager, Senior
Hill Air Force Base
Ogden, UT HX5 is an award-winning provider of engineering, research and development, and technical services to clients such as NASA and the Department of Defense. Founded in 2004, HX5 is a fast-growing veteran- and woman-owned company with locations nationwide. HX5 is currently seeking a qualified Information System Security Manager in support of the Aerospace Dominance Enabler Division at Hill Air Force Base in Ogden, UT.

Essential Duties and Responsibilities:

* Provide ISSM support that will be the primary cybersecurity technical advisor to the Authorizing Official (AOs), Program Manager (PM) and Information System Owner (ISO). For base enclaves, the ISSM manages the installation cybersecurity program, typically as a function of the Wing Cybersecurity Office. That program ISSM may also serve as the system ISSM for the enclave and reports to the CS/CC as the PM for the base enclave.

* Ensures the integration of cybersecurity into, and throughout the lifecycle of the IT, on behalf of the AO and in accordance with DoDI 8510.01
* Completes and maintains required cybersecurity certification IAW AFMAN
17-1303. Individuals in this position must be U.S. citizens
* Ensures all AF IT cybersecurity-related documentation is current and accessible to properly authorized individuals. AFI
17-101 6 FEBRUARY 2020 15
* Supports the PM or ISO in maintaining current authorization to operate, and approval to connect and in implementing corrective actions identified in the plan of action and milestones
* Coordinates, with the PM and AO staffs, development of an ISCM strategy and monitor any proposed or actual changes to the system and its environment
* Continuously monitors the IT and environment for security-relevant events, assess proposed configuration changes for potential impact to the cybersecurity posture, and assess the quality of security controls implementation against performance indicators
* Ensures cybersecurity-related events or configuration changes that impact AF IT authorization or adversely impact the security posture are formally reported to the AO and other affected parties, such as IOs and stewards and AOs of interconnected IT
* Appoints IS Security Officers (ISSOs) and provides oversight to ensure ISSOs follow established cybersecurity policies and procedures IAW DoDI 8500.01
* Ensures all ISSOs receive necessary technical training and obtain cybersecurity certification IAW AFMAN 17-1301, Computer Security (COMPUSEC), AFMAN 17-1303 and maintain proper clearances IAW DoDI 8500.01
* Ensures the AF IT is acquired, documented, operated, used, maintained, and disposed of properly and IAW DoDI 5000.02 and DoDI 8510.01

Education and Experience:

Must have one of the following combinations of education and experience:
* Bachelor’s degree, and twelve (12) years of directly related experience, five (5) of which must be in the DoD.

* OR twelve (12) years of directly related experience, eight (8) of which must be in the DoD.

* DoD 8570 compliant IAT Level II certification, and includes certifications such as:
CompTIA Security+, CISSP is required.

Preferred Qualifications:

Technical Skills
* EMASS administration, package management, and compliance reporting

* RMF lifecycle execution, control implementation, assessment preparation, and continuous monitoring

* NIST cybersecurity frameworks, including NIST SP 800‑53, 800‑37, 800‑171, and CSF

* CISSP‑level knowledge of security governance, risk management, and secure system design

* Cybersecurity program development and compliance oversight across DoD and federal environments

* Familiarity with the DoD acquisition lifecycle, milestone planning, and product support integration

* Strong understanding of DoD 5000 series acquisition processes and governance

* Proficient in RMF repositories, security documentation development, and ATO Artifact creation

* Experience applying cybersecurity standards to system engineering, configuration management, and lifecycle sustainment
Interpersonal Skills
*…