Information Systems Security Manager

AJANTA CONSULTING, LLC

San Antonio, TX

THIS POSITION IS CONTINGENT UPON BID

The Information Systems Security Officer (ISSO) provides enterprise cybersecurity and Risk Management Framework support to the Tri-Service Research Laboratory, Bioeffects Division, in support of the Air Force Research Laboratory enterprise. The position supports NIPRNet, DREN, RDTE, SIPRNet, and standalone enclaves and systems and helps maintain compliant, current, and supportable cybersecurity authorization packages.

• Perform Information Systems Security Officer duties aligned to DoD 8140 Cyberwarfare Work Role Code 721.
• Provide day-to-day cybersecurity support for NIPRNet, DREN, RDTE, SIPRNet, and standalone enclaves and systems.
• Serve as a cybersecurity consultant to unit technicians and customers regarding cybersecurity processes, policies, configurations, and implementation.
• Administer, coordinate, and track compliance with TSRL enterprise cybersecurity architecture, strategy, plans, and supplemental policy across the distributed AFRL organization.
• Support the Risk Management Framework (RMF) lifecycle and maintain current Authorization to Operate (ATO) packages, security documentation, and evidence in eMASS.
• Maintain and update system security plans, security assessment reports, plans of action and milestones, risk assessments, topology diagrams, software and hardware lists, standard operating procedures, and related artifacts.
• Upload changes to required ATO documentation in eMASS within three business days and maintain package artifacts for semiannual inspection.
• Support configuration management reviews, internal and external audits, inspections, vulnerability remediation, and maintenance of system hardening checklists and Security Technical Implementation Guides (STIGs).
• Use Assured Compliance Assessment Solution (ACAS), or other Air Force-approved scanning tools, to support audit controls and interpret vulnerability scan results.
• Conduct technical and non-technical risk and vulnerability assessments for systems, enclaves, applications, and software; document findings and support mitigation activities.
• Support Information Assurance Vulnerability Management dissemination, reporting, and compliance procedures.
• Maintain cybersecurity data and portfolio structures in ITIPS, AFRL RMF Workflow, and eMASS.
• Track DoD 8140.03 workforce qualification requirements, participate in related meetings, and support compliance metrics, reporting, and briefings.
• Support logical access onboarding and offboarding, including DD Form 2875 procedures and organizational account coordination.
• Verify completion of required cybersecurity training and support continued network access requirements for TSRL users.
• Support quarterly media destruction in accordance with Air Force and local policy.
• Attend cybersecurity meetings in person or virtually, prepare meeting minutes, and support the AFRL Cybersecurity Working Group through roll call, note taking, action tracking, project facilitation, and documentation development.
• Support system discovery, system categorization, compliant cybersecurity solution development, hardware and software entry/exit requirements, and organizational security policy development.
• Support administration and periodic review of MOAs, MOUs, and Acknowledgement of Responsibility letters for the RMF accreditation program.
• Courier classified equipment or media to approved TSRL destinations in accordance with applicable security regulations.
• Support AFRL Inspector General pre-inspection and post-inspection activities for the communications functional area.
• Support research, selection, implementation, operation, metrics collection, and reporting for IT pilot or exploratory projects with potential enterprise…