Overview
DecisionPoint seeks a Information System Security Manager (ISSM) to lead cybersecurity governance, Risk Management Framework execution, and information-system security activities for the U.S. Air Force Research Laboratory (AFRL) Digital Capabilities Directorate. The ISSM will serve as a key cybersecurity leader and principal interface among system owners, security teams, assessors, and authorizing officials.
The ISSM will guide systems through the full authorization lifecycle, maintain defensible security documentation and continuous-monitoring practices, and coordinate remediation of vulnerabilities and risks across enterprise IT, software, cloud, data, and mission-support environments.
Candidates in the Dayton, Ohio, area are preferred. Classified work and other designated activities must be performed on-site at an authorized Government facility.
Note: By applying to this position, you acknowledge and consent to having your resume included in an active competitive government contract bid.
Duties & Responsibilities
The Information System Security Manager will:
- Lead information-system security management, cybersecurity governance, and Risk Management Framework activities for assigned Air Force systems.
- Develop and maintain complete authorization packages, including system security plans, security assessment reports, plans of action and milestones, and supporting evidence required to achieve and sustain authorization.
- Oversee security-control implementation and assessment, continuous monitoring, vulnerability management, security testing, secure configuration, and timely remediation of identified risks.
- Collaborate with system owners, program managers, ISSOs, ISSEs, assessors, Authorizing Official representatives, and technical teams to resolve security issues and support informed risk decisions.
- Evaluate architectures, designs, system changes, and technical solutions for compliance and security risk across enterprise, cloud, software, data, and classified environments.
- Coordinate cybersecurity incident response, defensive cyber operations support, and required reporting of security concerns or violations.
- Ensure cybersecurity personnel meet applicable DoDM 8140.03 qualification and training requirements and that required security metrics, documentation, and deliverables remain accurate and current.
- Maintain continuity during personnel transitions and support Government core hours, on-site classified activities, emergency response, and travel as required.
Qualifications
Clearance Requirement:
Must hold an active Secret clearance. Eligibility for or prior access at the Top Secret/Sensitive Compartmented Information level is strongly preferred.
Education:
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field. A master's degree in a related discipline is preferred.
Experience:
- Minimum eight years of cybersecurity, information assurance, or information-system security experience, including at least five years in an ISSM, senior ISSO, RMF lead, or comparable cybersecurity-governance role.
- Demonstrated experience supporting Department of Defense or federal RMF authorization and continuous monitoring, including authorization packages, security-control assessments, vulnerability remediation, and plans of action and milestones.
- Experience supporting classified, multi-level security, cloud, software-development, or research-and-development environments preferred.
Technical Knowledge:
- Expert knowledge of NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A, DoDI 8510.01, CNSSI 1253, RMF, security-control assessment, and continuous monitoring.
- Working knowledge of secure system architecture, cloud security, vulnerability management, security technical implementation guides, incident response, and defensive cyber operations.
- Ability to evaluate technical evidence, communicate risk clearly, and translate cybersecurity requirements into practical remediation and authorization actions.
Certifications:
- Must satisfy the applicable DoDM 8140.03 cyberspace workforce qualification requirements for the assigned work role and proficiency level; CISSP or another appropriate DoD-approved certification is required.
- CGRC, CAP, CCSP, cloud-security, or other advanced cybersecurity certifications are preferred.
Skills:
- Strong cybersecurity leadership, governance, and risk-management capabilities.
- Excellent written and verbal communication skills, including the ability to brief technical and executive stakeholders.
- Strong analytical judgment and the ability to assess complex technical evidence and security risk.
- Ability to coordinate multiple systems, authorization activities, priorities, and stakeholder groups.
- Ability to work independently while collaborating effectively with engineering, operations, software, and program-management teams.
- Ability to support Eastern Time core hours and travel to Wright-Patterson Air Force Base or other authorized facilities as required.
Our Equal Employment Opportunity Policy
- EEO and Affirmative Action Policy: DecisionPoint Corporation is an Equal Employment Opportunity and Affirmative Action employer. It is the policy of DecisionPoint Corporation to provide equal employment opportunity in accordance with all applicable Equal Employment Opportunity/Affirmative Action laws, directives and regulations to all employees and qualified applicants without regard to race, ethnicity, color, religion, national origin, sex, age, disability status, pregnancy, sexual orientation, gender identity, genetic information, protected veteran status, or any other protected status under Federal, State or Local laws.
- Pay Transparency Policy: In accordance with Presidential Executive Order 13665, DecisionPoint Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information.
- Authorization to Share Resume and Personal Information: By expressing your interest and submitting your resume for this position, you authorize DecisionPoint Corporation to share your resume, as well as personal information included on the resume, with its subsidiaries, affiliates and teaming partners for the purpose of considering you for this position and other available positions requiring comparable skills, education and experience. Should DecisionPoint Corporation. or its affiliates and teaming partners wish to initiate pre-employment discussions, you will be asked to complete an employment application and related employment documents.
