Information Systems Security Manager

We are seeking a senior Information Systems Security Manager (ISSM) to serve as the Subject Matter Expert (SME) for the Combined Air Operations Center – eXperimental (CAOC-X) enclave. The ISSM provides comprehensive cybersecurity support for all CAOC-X applications, tests, experiments, and exercises. This role is responsible for leading all cybersecurity operations, managing the full Risk Management Framework (RMF) lifecycle, and ensuring the security posture of both TS/SCI and NIPRNET environments complies with Federal, DoD, and Air Force directives. The ISSM serves as the focal point for all cybersecurity matters and will work closely with engineering, architecture, and mission teams to ensure the secure integration and protection of multi-classification environments.

Requirements

• Serve as the senior cybersecurity authority for CAOC-X information systems, ensuring compliance with directives such as AFI 17-101, DoDI 8510.01, and NIST SP 800-53.
• Develop, manage, and maintain complete Risk Management Framework (RMF) documentation and certification & accreditation (C&A) packages for all classified and unclassified systems.
• Lead all Authority to Operate (ATO) activities, including package development for ATO, Authority to Connect (ATC), and Interim Authority to Test (IATT).
• Serve as the focal point for cybersecurity, including Computer Security (COMPUSEC), Communications Security (COMSEC), and Telecommunications Electronics Materials Protected from Emanating Spurious Transmissions (TEMPEST)
• Oversee vulnerability management, STIG/SRG implementation, patching, and remediation using tools such as ACAS, NeuVector, & Endpoint Security Solutions (ESS).
• Lead the identification, evaluation, and mitigation of physical, technical, and administrative risks to the AOC and Air Force Global Information Grid.
• Maintain situational awareness of the cybersecurity posture, initiate corrective actions, and lead local cyber incident response activities.
• Conduct annual security reviews and testing of all cybersecurity controls.

Knowledge:

• Demonstrated experience creating, managing, and maintaining Risk Management Framework (RMF) documentation and artifacts.
• Proven experience with the cyber certification process for obtaining Authority to Operate (ATO), Authority to Connect (ATC), and Interim Authority to Test (IATT) on NIPRNET and SIPRNET.
• Hands-on experience implementing Security Technical Implementation Guides (STIGs) and managing Information Assurance Vulnerability Management (IAVM) programs.
• Experience with Commercial Solutions for Classified (CSfC) cross-domain solutions and their associated certification processes.