Information Systems Security Manager (ISSM)

About the role

The Information Systems Security Manager (ISSM) is based at Ramstein AB, Germany, and works as a contractor supporting the government's cyber readiness and the Risk Management Framework (RMF). The role acts as the primary cyber security point of contact for systems, ensures compliance with security policies and regulations, and prepares the documentation needed for Assessments & Authorization (A&A) packages. The position requires a Secret clearance.

Key responsibilities

• Serve as the primary cyber security point of contact, disseminating threats, risks and authorization status to stakeholders
• Oversee accreditation and certification of systems according to DoD, Intelligence Community and agency requirements
• Prepare SSPs, POA&Ms, risk assessments and A&A documentation, and work with Authorizing Officials to maintain ATO status
• Support Command Cyber Readiness Inspections and run regular reviews of DISA STIGs and ACAS vulnerability scans
• Develop RMF control family plans, security policies and procedures, and train users on security practices
• Draft cyber policies, SLAs, MOAs and MOUs, and follow government change configuration control processes
• Perform ISSM duties under AFMAN 17-01 and DoDI 8510.01, and stay current with NIST 800-53, 800-60, 800-37 and related directives

Required profile

• At least 8 years of related experience, including 8 years specializing in computer security requirements, security product evaluation and problem resolution (the text also states a minimum of 10 years)
• Bachelor's degree in a relevant field, or equivalent experience (master's degree with 8 years, or no degree with 13 years)
• Expert knowledge of Federal and DoD cybersecurity regulations and policies
• DoD 8570.01-M Information Assurance Manager (IAM) Level III certification
• Ability to obtain a Secret clearance; US citizenship required

Required skills

• Extensive knowledge of the RMF and of ACAS vulnerability scanning
• Proficiency with STIG implementation and automation tools such as SCAP and STIG Viewer
• Familiarity with virtualization, basic networking and cybersecurity best practices

What we offer

• Salary range of $106,250 - $143,750, depending on experience, location and contract terms
• International assignment allowances, premium uplifts and relocation or transportation benefits
• Medical, dental, vision, 401(k) and insurance benefits, plus flexible work weeks and paid time off