ISSM​/Cybersecurity Analyst

Innovative Technologies Corporation is seeking an ISSM/Cybersecurity Analyst to support the Defense Health Agency (DHA) Medical Simulation and Training Program Management Office (MST PMO) in Orlando, Florida. In this onsite role, you will support DoD Risk Management Framework (RMF) activities, Assessment and Authorization (A&A), and continuous-monitoring efforts across the MST PMO system portfolio.

You will serve as the Information System Security Manager (ISSM) for assigned DHA MST PMO systems, helping maintain authorization packages, manage security artifacts in eMASS, and coordinate security-control validation and vulnerability remediation. Work includes supporting IAVM/IAVA compliance, evaluating security impacts of system and configuration changes, and producing audit-ready documentation to inform IATT and ATO decisions.

• Perform ISSM responsibilities for assigned DHA MST PMO systems.
• Develop, maintain, and coordinate RMF authorization and reauthorization packages.
• Manage security controls, evidence, assessments, POA&Ms, and approval workflows in eMASS
  .
• Coordinate with system owners, ISSOs, System Administrators, engineers, Security Control Assessors, and Authorizing Official organizations.
• Conduct or coordinate security-control assessments, vulnerability scans, STIG reviews, and remediation tracking.
• Support IAVM/IAVA compliance and continuous monitoring.
• Evaluate the cybersecurity impact of system and configuration changes.
• Document findings and provide recommendations supporting IATT and ATO decisions.
• Maintain accurate, complete, and audit-ready cybersecurity documentation.
• Report cybersecurity risks, compliance gaps, and matters requiring Government action.

• Active DoD SECRET clearance
  .
• Bachelor’s degree
  .
• Seven (7) or more years of relevant cybersecurity, information-assurance, information-systems security, or RMF/A&A experience.
• Current DoD-approved IAT Level II or higher certification.
• Experience serving as an ISSM within a DoD program office or acquisition environment.
• Demonstrated experience with DoD RMF and system authorization or reauthorization.
• Hands-on experience managing cybersecurity packages in eMASS
  .
• Experience preparing and maintaining RMF artifacts, including System Security Plans, security-control evidence, risk assessments, and POA&Ms.
• Experience supporting ATO or IATT packages and coordinating with Authorizing Official organizations.
• Experience with vulnerability assessment, STIG compliance,
  ACAS or Nessus
  , and remediation tracking.
• Ability to work onsite in Orlando and satisfy applicable DHA security, CAC, facility-access, and system-access requirements.

• DoD Risk Management Framework (RMF)
• Assessment and Authorization (A&A)
• eMASS
• STIG
• IAVM/IAVA
• NIST SP 800-53
• ACAS
• Nessus
• SCAP
• POA&Ms
• System Security Plans
• IATT
• ATO
• IAT Level II

• 401(k)
• 401(k) matching
• Dental insurance
• Employee assistance program
• Employee discount
• Flexible spending account
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Professional development assistance
• Referral program
• Tuition reimbursement
• Vision insurance

• Location: Orlando, FL (onsite);
  
  Work Location:
  
  in person;
  Orlando, FL 32826 (Required ability to commute).
• Security clearance: Secret (Required).
• Minimum clearance: Active DoD SECRET clearance.
• Telework: Situational telework may be authorized by the Government but is not a regular component of the position.
• Language: English (Required).

• Anticipated salary range: $60,000–$68,000 per year.
• Pay: $60,000.00 - $68,000.00 per year.
• Published 10/9/2026.