Information System Security Manager; ISSM

Position: INFORMATION SYSTEM SECURITY MANAGER (ISSM)

Location:

Work will be accomplished at the TSRL facility – Joint Base San Antonio-Fort Sam Houston, Building 3260, San Antonio, Texas.

Schedule:

Work schedule is normally M-F 0700 to 1700.

• The contractor employee shall possess a minimum of a Bachelor of Science Degree in Information Technology or Cybersecurity demonstrated by a copy of the degree.
• The contractor employee shall have a minimum of five (5) years of demonstrated experience working Risk Management Framework (RMF) requirements and providing cybersecurity services with no more than 3 consecutive years of lapse in cyberspace work.
• The contractor employee shall possess the required Information Technology or Cybersecurity education, training, or certifications IAW DoDM 8140.03 and current Government directives, regulations, and policies for the role, or labor category, it is fulfilling (reference DFARS ).
• The contractor employee shall possess a current, valid Security Plus Certification.
• The contractor employee shall possess Intermediate Level Cybersecurity Work Role experience.

• Possesses current Secret Clearance.

• The contractor employee shall provide ISSM cybersecurity support for NIPRNet, DREN, RDTE, SIPRNet, and standalone enclaves/systems.
• The contractor employee shall perform the Information System Security Manager (ISSM), 8140 Cyberwarfare Code of 722 duties to include formally validating and verifying that all administrative and technical personnel meet the mandatory baseline certification and training requirements of DoD 8570.01-M / DoDI 8140 prior to granting elevated system access; administering and maintaining signed Privileged Access Agreements (PAAs); and conducting recurring audits of all privileged accounts.

• The contractor employee shall serve as a cybersecurity consultant for unit technicians.
• The contractor employee shall perform all tasks necessary to administer, coordinate, and track compliance with TSRL enterprise cybersecurity architecture, strategy, plans, and supplemental policy for the entire distributed AFRL organization.
• The contractor employee shall ensure Risk Management Framework (RMF) requirements are met, Authority to Operate (ATO) is granted and remains valid, all security-related documentation is kept up-to-date, and supported units have a reliable team of cybersecurity experts.
• The contractor employee shall assist in configuration management process reviews and maintenance to ensure appropriate secure mechanisms are in place, update RMF requirements, and support internal and external entity audits and inspections.
• The contractor employee shall perform data entry, monitoring, and provide AFRL organization assistance to maintain AFRL data and database organization structures within the IT portfolio in the Information Technology Investment Portfolio System (ITIPS), AFRL Risk Management Framework Workflow and Enterprise Mission Assurance Support Service (eMASS) systems.
• The contractor employee shall achieve and continuously maintain the Authorization to Operate (ATO) for TSRL, related subsystems; NIST 800-53, Rev 5, Security and Privacy Controls for Federal Information Systems and Organizations;
  Committee on National Security Systems Instruction No. 1253 (CNSSI 1253, Rev
  4), Security Categorization and Control Selection for National Security Systems; DODI 8510.01, Risk Management Framework for DoD Systems; and DISAI 270-50-9, Life Cycle Sustainment Planning, among other risk management framework directives.
• The contractor employee shall advise senior management and Authorizing Official on risk levels, security posture, and changes affecting the organization’s cybersecurity…