Information Systems Security Manager; ISSM) Security Clearance

Position: Information Systems Security Manager (ISSM) with Security Clearance
Overview Thank you for considering IT Concepts dba Kentro, where innovation drives opportunity and collaboration leads to success. Our dynamic community of experts is fully committed to advancing our customers' missions, fostering professional growth, and making a positive impact on our communities. By joining our supportive community, you will find that Kentro is dedicated to your personal and professional development.

Together, we can drive meaningful change, spark innovation, and achieve extraordinary milestones. Kentro is hiring an Information Systems Security Manager (ISSM) to support USSOCOM/ EDAT Zero Trust. This position will primarily operate within a Top-Secret environment and will work closely with USSOCOM engineering teams, cybersecurity personnel, system owners, architects, program leadership, and the Defense Intelligence Agency (DIA). The ideal candidate is not simply experienced in maintaining RMF documentation.

We are looking for an ISSM who has personally supported multiple information systems through the full Risk Management Framework (RMF) and Authorization to Operate (ATO) lifecycle, preferably resulting in successful DIA authorization. This individual must be technically credible, organized, proactive, and capable of working collaboratively with engineers to translate technical implementations into defensible security controls and authorization evidence.

Location:

On-site in Tampa, FL This

Job Description reflects the primary duties of the role; however, it is not intended to be all-inclusive. Team members may be asked to take on additional responsibilities in alignment with customer expectations, business needs, and Kentro's culture of collaboration and adaptability. Responsibilities
* Lead and coordinate RMF and ATO activities for systems operating within USSOCOM classified environments.
* Manage systems through the complete authorization lifecycle, from initial system categorization and control implementation through assessment, authorization, continuous monitoring, and reauthorization.
* Develop, maintain, and manage authorization packages within Xacta.
* Serve as a primary cybersecurity liaison between engineering teams, system owners, program leadership, ISSOs, security assessors, and DIA authorization stakeholders.
* Work directly with engineers to understand system architecture, configurations, data flows, interfaces, security boundaries, and implemented cybersecurity controls.
* Translate technical engineering activities into appropriate RMF control implementation statements and supporting evidence.
* Develop and maintain required authorization artifacts, including SSPs, control implementation documentation, POA&Ms, risk assessments, network/system diagrams, inventories, security procedures, and supporting evidence.
* Review ATO packages for completeness, technical accuracy, consistency, and readiness prior to submission.
* Coordinate remediation of security findings and vulnerabilities with engineering teams.
* Track cybersecurity risks, deficiencies, POA&M items, dependencies, and authorization milestones through closure.
* Support security control assessments, validation activities, and responses to assessor or Authorizing Official questions.
* Maintain authorization posture following ATO through continuous monitoring, change management, vulnerability management, and reauthorization activities.
* Identify authorization risks early and communicate potential schedule or compliance impacts to program leadership.
* Participate in technical and programmatic discussions to ensure cybersecurity requirements are incorporated into engineering decisions rather than addressed only at the end of the development lifecycle.
* Build productive working relationships across the program and maintain professional, collaborative engagement with USSOCOM and DIA stakeholders. Qualifications

* Education:

Bachelor's degree in Cybersecurity, Information Assurance, Information Systems, Computer Science, Information Technology, Engineering, or a related technical field. Equivalent education and experience may be considered in accordance with contract and position requirements.

* Experience:

* Significant experience supporting cybersecurity/RMF activities within classified DoD or Intelligence Community environments.
* Hands-on experience using Xacta to develop, manage, track, or submit RMF/ATO packages.
* Demonstrated experience supporting information systems through the full RMF/ATO lifecycle.
* Technical

Skills:

* DoD Risk Management Framework (RMF)
* NIST SP 800-53 security controls
* Security control implementation and assessment
* System Security Plans (SSPs)
* Plans of Action and Milestones (POA&Ms)
* Vulnerability and risk management
* Continuous monitoring
* Authorization and reauthorization processes
* Ability to understand technical system architectures and communicate effectively with cybersecurity engineers, system engineers, architects, and other technical SMEs.
* Strong written and verbal…