Information System Security Manager (ISSM)

Posted Yesterday
Be an Early Applicant
Hiring Remotely in USA
Remote
Senior level
Information Technology • Professional Services
The Role
Manages cybersecurity compliance and authorization for Air Force NIPR systems. Responsibilities include developing and maintaining system security plans, supporting RMF accreditation, conducting audits and inspections, managing POA&Ms, STIGs, IAVM compliance, continuous monitoring, FISMA requirements, security testing, and ATO activities. The role also provides tactical security guidance, assesses technology risks, and coordinates cybersecurity activities across multi-contractor teams and cloud and on-premises environments.
Summary Generated by Built In

Dine Source is seeking an ISSM to support an Air Force program. We are seeking a motivated cybersecurity professional to join our Cyber team.  As a member of our team, you'll create system security plans, make cyber risk decisions, and conduct audits on NIPR systems. 

Responsibilities:

  • Develops, implements, and maintains data strategies to ensure quality and accessibility
  • Develops/maintains the definition and documentation of architectural standards, reference architectures processes, operating models, and logical and physical data/associated data management resources
  • Ensure unclassified systems follow DoD and government regulations while still meeting program demands and operating in an accredited state.
  • Lead all aspects of SSP development, maintenance, accreditation/re-accreditation, and oversight, including conducting periodic reviews to ensure compliance.
  • Work with cybersecurity lead and be a primary contact for IS security inspections, tests, and reviews by oversight authorities.
  • Other duties as assigned. 

Qualifications:

  • Must have an active Secret Clearance 
  • Have acquired a BS in Computer Science, Cyber Security, or a related field; with 8+years of relevant cybersecurity experience;
  • Must have one of the following current certifications: CASP+, CISSP, CISSP Associate, or GSLC.
  • Have 3+ years working with the Air Force RMF security frameworks, including DoD and Air Force security policies and instructions.
  • Must have the experience and the ability to provide tactical information security advice and manage all Cybersecurity related activities for current or future IT platforms
  • Must work in conjunction with a multi-contractor team in support of Cybersecurity, continuous monitoring, and other emerging compliance requirements.
  • Must ensure Federal Information Security Management Act (FISMA) requirements are being met and track in the Air Force’s Information Technology Investment Portfolio Suite (ITIPS).
  • Must ensure that software, hardware, and firmware comply with appropriate IAVM’s.
  • Must track and action POA&M entries as part of the RMF process.
  • Experience is required for reviewing and updating STIG results.
  • Must ensure Continuous Monitoring is adhered to.
  • Must have working experience with Risk Management Framework and NIST 800-53 revision 4 and revision 5 controls
  • Must have experience working within eMASS and obtaining an ATO
  • Must be familiar with performing Security validation testing through a DevSecOps process and within both on-premises and a Cloud Environment
  • Mush have experience with ACAS, utilizing Splunk, reviewing of audit logs, and other cybersecurity monitoring functions
  • Ability to identify risks of implementing technology solutions and analyze the impact on achieving desired business outcomes

About Us
Diné Development Corporation (DDC) is a Navajo Nation owned family of companies that provides government agencies and commercial organizations with high-quality IT, professional, environmental, and research and development services. DDC is dedicated to empowering the Navajo Nation and communities we serve.

Benefits
Eligible full-time employees receive a comprehensive benefits package, including medical, dental, vision, life and disability coverage, retirement savings with company match, paid time off, voluntary supplemental benefits, and access to an employee assistance program. The package also includes educational assistance, with tuition reimbursement.

EEO Statement
This contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a) and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, national origin, or for inquiring about, discussing, or disclosing information about compensation, or any other basis prohibited by law. We participate in E-Verify.

Skills Required

  • Active Secret clearance
  • Bachelor of Science degree in Computer Science, Cybersecurity, or a related field
  • 8+ years of relevant cybersecurity experience
  • Current CASP+, CISSP, CISSP Associate, or GSLC certification
  • 3+ years of experience with Air Force RMF security frameworks, DoD regulations, and Air Force security policies and instructions
  • Experience providing tactical information security advice and managing cybersecurity activities for IT platforms
  • Experience supporting cybersecurity, continuous monitoring, and compliance requirements in a multi-contractor environment
  • Experience ensuring FISMA requirements are met and tracking activities in ITIPS
  • Experience ensuring software, hardware, and firmware comply with IAVMs
  • Experience tracking and actioning POA&M entries within the RMF process
  • Experience reviewing and updating STIG results
  • Experience with continuous monitoring
  • Experience with RMF and NIST 800-53 Revision 4 and Revision 5 controls
  • Experience working with eMASS and obtaining an ATO
  • Experience performing security validation testing through DevSecOps in on-premises and cloud environments
  • Experience with ACAS, Splunk, audit log review, and cybersecurity monitoring functions
  • Ability to identify technology implementation risks and analyze impacts on business outcomes
Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
HQ: Scottsdale, AZ
120 Employees
Year Founded: 2004

What We Do

Diné Development Corporation (DDC) is a family of subsidiaries that delivers IT, professional, and environmental services to solve the dynamic challenges of government agencies and commercial firms. Inspired by our Navajo legacy, we lead with quality and ingenuity to advance our clients’ missions. We deliver exceptional solutions while creating sustainable prosperity for the Navajo Nation and communities across the world.

Similar Jobs

In-Office or Remote
4 Locations
22677 Employees
145K-190K Annually

Micron Technology Logo Micron Technology

Architect

Artificial Intelligence • Hardware • Information Technology • Machine Learning
In-Office or Remote
15 Locations
45000 Employees

Nexthink Logo Nexthink

Manager, Solutions Consulting

Artificial Intelligence • Big Data • Cloud • Information Technology • Machine Learning • Software
Remote or Hybrid
Boston, MA, USA
1200 Employees
228K-280K Annually

DraftKings Logo DraftKings

Financial Crimes Compliance Specialist, Predictions

Digital Media • Gaming • Information Technology • Software • Sports • Esports • Big Data Analytics
Remote or Hybrid
United States
6400 Employees
76K-95K Annually

Similar Companies Hiring

NODA AI Thumbnail
Artificial Intelligence • Information Technology • Software • Cybersecurity
Sydney, AU
54 Employees
Golden Pet Brands Thumbnail
Digital Media • eCommerce • Information Technology • Marketing Tech • Pet • Retail • Social Media
El Segundo, California
178 Employees
Cravath, Swaine & Moore LLP Thumbnail
Legal Tech • Other • Professional Services
New York, NY
1200 Employees

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account