Information System Security Manager SME

Job Summary

Galapagos Federal Systems, LLC is seeking a highly qualified and experienced Information Systems Security Manager (ISSM) – SME Level 4 to support the United States Space Force (USSF) in securing mission-critical classified information systems, networks, and advanced test and training capabilities.

In this critical role, the ISSM SME Level 4 will provide expert cybersecurity leadership, information assurance oversight, and technical guidance to ensure classified systems and networks comply with Department of Defense (DoD), Department of the Air Force (DAF), and Intelligence Community (IC) cybersecurity requirements. The position will support the development, implementation, assessment, authorization, and continuous monitoring of classified information systems essential to USSF mission readiness and space superiority.

The ideal candidate will possess extensive experience managing cybersecurity programs within classified DoD or IC environments, with demonstrated expertise in the Risk Management Framework (RMF), Assessment and Authorization (A&A) processes, and Authorization to Operate (ATO) lifecycle management. The successful candidate will demonstrate exceptional technical judgment, leadership, and communication skills while supporting complex cybersecurity initiatives in a fast-paced, mission-focused environment.

Key Responsibilities

The ISSM SME will:

• Serve as a senior cybersecurity Subject Matter Expert (SME), providing information systems security management, technical guidance, and information assurance oversight for classified United States Space Force (USSF) networks and mission-critical systems
• Manage and coordinate cybersecurity activities in accordance with Department of Defense (DoD), Department of the Air Force (DAF), Intelligence Community (IC), and applicable Special Access Program (SAP) security requirements
• Implement and maintain cybersecurity policies, procedures, and security controls to protect the confidentiality, integrity, and availability of classified information systems, networks, and resources
• Lead and coordinate Risk Management Framework (RMF) activities, including security control implementation, assessments, authorization documentation, and continuous monitoring throughout the system lifecycle
• Develop, review, and maintain Assessment and Authorization (A&A) documentation supporting Authorizations to Operate (ATOs), Interim Authorizations to Test (IATTs), and ongoing system authorization requirements
• Prepare and maintain System Security Plans (SSPs), Security Controls Traceability Matrices (SCTMs), Plans of Action and Milestones (POA&Ms), and other required cybersecurity documentation in accordance with applicable National Institute of Standards and Technology (NIST) standards and the Joint Special Access Program Implementation Guide (JSIG)
• Coordinate security assessments, authorization reviews, and risk management activities with Authorizing Officials (AOs), Security Control Assessors (SCAs), system owners, and Government cybersecurity representatives
• Assess cybersecurity vulnerabilities, security control deficiencies, and system risks; develop mitigation strategies and track corrective actions through completion
• Provide cybersecurity oversight for the development, implementation, modification, and extension of classified information systems and Government-furnished classified networks
• Evaluate proposed cybersecurity solutions to ensure compatibility with system and network hardware, software configurations, operational requirements, and established security standards
• Coordinate cybersecurity recommendations, system modifications, and security control implementations with system engineers, network administrators, configuration managers, and Government stakeholders
• Develop and execute cybersecurity test plans, security control validation procedures, and technical assessments to verify system security capabilities and compliance requirements
• Conduct research and analysis of cybersecurity policies, regulatory requirements, emerging threats, and technical guidance to support Government decision-making and mission objectives
• Monitor cybersecurity program schedules, milestones, action items, and compliance requirements to ensure timely completion of assigned tasks and deliverables
• Prepare, review, and update Government cybersecurity documentation, technical reports, security procedures, program reviews, and executive briefing materials
• Provide cybersecurity status updates, risk assessments, technical recommendations, and security compliance briefings to Government leadership and project stakeholders
• Coordinate with Government personnel, program managers, technical teams, and security organizations to support cybersecurity initiatives and resolve security-related challenges
• Develop, implement, and maintain information systems security education, training, and awareness programs in accordance with applicable Government requirements
• Support continuous monitoring and ongoing authorization activities to maintain system security posture, address emerging vulnerabilities, and ensure continued compliance with applicable cybersecurity requirements

Skills and Experience

The ISSM SME must have:

• Active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance
• 15+ years of relevant cybersecurity experience, including managing DoD and/or Intelligence Community (IC) information assurance activities supporting mission-critical defense programs
• Extensive experience implementing and managing the Risk Management Framework (RMF) and Assessment and Authorization (A&A) processes for classified information systems
• Demonstrated expertise in DoD, DAF, IC, and applicable Special Access Program (SAP) cybersecurity policies, standards, and security requirements
• Experience developing, reviewing, coordinating, and maintaining authorization packages supporting Authorizations to Operate (ATOs) and Interim Authorizations to Test (IATTs)
• Extensive knowledge of NIST Special Publication 800-53, the Joint Special Access Program Implementation Guide (JSIG), and applicable Government security control requirements
• Demonstrated experience developing and maintaining System Security Plans (SSPs), Security Controls Traceability Matrices (SCTMs), Plans of Action and Milestones (POA&Ms), and other RMF documentation
• Experience coordinating cybersecurity assessments, authorization reviews, and risk management activities with Authorizing Officials (AOs), Security Control Assessors (SCAs), and Government stakeholders
• Strong understanding of information systems security principles, including confidentiality, integrity, availability, access controls, vulnerability management, and secure network configurations
• Experience assessing cybersecurity risks, identifying system vulnerabilities, developing mitigation strategies, and tracking corrective actions through completion
• Demonstrated ability to develop and execute cybersecurity test plans, security control assessments, and validation procedures
• Experience evaluating cybersecurity requirements and recommending technical security solutions compatible with existing system and network architectures
• Experience supporting classified network operations, system security management, and continuous monitoring activities
• Demonstrated experience preparing cybersecurity documentation, technical reports, executive briefings, and security recommendations for Government leadership
• Ability to independently manage complex cybersecurity initiatives, coordinate multiple stakeholders, and meet established program deadlines
• Ability to complete required training and maintain applicable cybersecurity workforce certifications in accordance with DoD requirements

Education and Certifications

The ISSM SME must meet the following:

Required

• BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science, from an ABET accredited or CAE designated institution 
• One or more of the following (required): Security+, CCSP, CGRC/CAP, CASP+, Cloud+, SSCP, GSEC—or equivalent military training/certification 
• One or more of the following (desired): CISM, CISSO, CISSP, CISSP-ISSMP, GCIA, GCSA, GSLC, CGIH, or FITSP-M—or equivalent military training/certification

Benefits

• Medical, dental, vision, disability, and life insurance
• Flexible Spending Accounts
• 401(k)
• PTO
• Paid Parental Leave
• Military Differential
• Tuition reimbursement
• Paid federal holidays

Security Clearance

Must be a U.S. Citizen. A high-level Department of War active security clearance is/may be required. Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to government information.

Physical Requirements

Work may involve sitting or standing for extended periods of time and typing and reading from a computer screen. The candidate must have enough mobility, including bending, reaching, and kneeling, to complete daily duties in a prompt and efficient manner, and that may include lifting up to thirty pounds, as necessary.

Company Summary

Headquartered in Hawaii, Galapagos Federal Systems, LLC, is an SBA-Certified NHO-owned 8(a) Small Business specializing in global information technology solutions. We deliver professional services in IT Design & Installation, Cybersecurity Engineering & Support, Application Integration & Development, Software & Hardware Engineering, Network & Systems Management, Information Systems Security, and Business Management Services.

Leveraging over 30 years of providing IT services to the federal & commercial market with projects found around the world, our team has innovative expertise in the development of a wide range of technological solutions. Galapagos Federal Systems, LLC is an equal opportunity employer.

Our service commitment is simple - "Quality IT Solutions... On Time & On Budget."

Company Employment Statement

Galapagos Federal Systems, LLC reserves the right to change or modify job duties and assignments at any time. The above job description is not all encompassing as positions, functions, and qualifications may vary depending on business needs. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Galapagos Federal Systems, LLC is an equal opportunity employer and does not discriminate against applicants based on race, color, creed, religion, medical condition, legally protected genetic information, national origin, sex (including pregnancy, childbirth, or related medical condition), sexual orientation, gender identity and expression, age, disability, or Vietnam era, or other eligible veteran status or legally protected characteristics.

The final salary offered within the posted range will be based on the candidate’s qualifications, experience, skills, education, and other job-related factors.