Sr. Information System Security Manager; ISSM

Amentum currently has an opening for an Information Systems Security Manager (ISSM) to work in our Atlantic Undersea Test and Evaluation Center (AUTEC) office. This is a full-time on-site position with no remote capability working out of West Palm Beach, Florida.

The ISSM owns the cybersecurity posture of all contractor-operated information systems at AUTEC; including in West Palm Beach and on Andros Island, The Bahamas. The role leads each system through the DoD Risk Management Framework (RMF), keeps every Authorization to Operate (ATO) current, and is the contractor’s primary cybersecurity points of contact to the Government. The ISSM is accountable for systems spanning enterprise IT, range instrumentation and test-and-evaluation (T&E) systems, Platform IT (PIT) and operational technology supporting undersea testing.

• Lead all AUTEC systems through the six RMF steps under DoDI 8510.01, from categorization through authorization and continuous monitoring.
• Build, maintain and submit authorization packages in eMASS:
  System Security Plan, security control traceability, risk assessments, POA&Ms and supporting artifacts.
• Track ATO expiration dates and start reauthorization early enough that no system operates without a valid authorization.
• Coordinate assessments with the Security Control Assessor (SCA) and Navy Qualified Validators, and close findings on schedule.
• Assess the security impact of every proposed system change and serve as a voting member of the Configuration Control Board.

• Run the continuous monitoring program: scheduled ACAS/Tenable scans, STIG and SRG compliance checks, endpoint security (ESS) reporting and log review.
• Track IAVM notices (IAVAs, IAVBs, TAs) and Navy cyber orders to closure, reporting compliance by the required dates.
• Own the cybersecurity POA&M: accurate milestones, realistic dates and documented mitigations for every open weakness.
• Prepare the site for Command Cyber Readiness/Operational Readiness inspections and other Government audits.

• Maintain the site incident response plan and lead the contractor response to cybersecurity incidents and spillages.
• Report incidents to the Government ISSM and Navy cyber defense channels within required timelines.
• Produce monthly cybersecurity status reports and brief program leadership and the Government on risk.

• Supervise, task and develop ISSOs and cybersecurity technicians; verify each holds the DoD 8570/8140 qualification their work role requires.
• Manage privileged access: DD Form 2875 (SAAR) processing, privileged user agreements and periodic access reviews.
• Run cybersecurity awareness, removable media, and data-at-rest and data-in-transit controls for the site.
• Write and maintain cybersecurity policies, standard procedures and continuity plans aligned with DoD, DoN and contract requirements.
• Advise engineering and operations on secure design for new range, T&E and network capabilities, including Zero Trust alignment.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science or a related field.
• At least 8 years of information assurance or cybersecurity experience, including at least 3 years as an ISSM or ISSO on DoD systems.
• Hands‑on experience taking DoD systems through RMF to an ATO, including authoring the SSP, POA&M and other package artifacts.
• CISSP or CISM
• Working proficiency in eMASS.
• Experience applying DISA STIGs and SRGs, and managing vulnerability remediation with…