Information System Security Manager

Title Information System Security Manager (ISSM) Req Number CYB-26-00005 Requisition Category ACTIVE Full-Time/Part-Time Full-Time Location Wright Patterson AFB, OH Description Pay Rate: The annual base salary range for this position TBD. Please note that the salary information is a general guideline only. At Sawdey Solution Services, we recognize that attracting the best talent is key to our strategy and success as a company. We will consider several factors when extending an offer to an applicant. These factors include (but are not limited to) the position, associated responsibilities, work experience, education, related training, and related skills. **Position Location:**Wright-Patterson AFB, OH Telework/Work-from-Home Authorized: Yes - When Authorized/Hybrid About the Role: The Information System Security Manager (ISSM) / Cybersecurity Manager will provide Cross Domain Solutions (CDS) Network Architect Certification and Accreditation (C&A) support and cybersecurity leadership and oversight for assigned information systems, classified networks, cross-domain solutions, laboratories, and flight-test environments at the Secret level and below. The ISSM will oversee Risk Management Framework (RMF) execution in accordance with DoDI 8510.01, Risk Management Framework for DoD Information Technology, 12 March 2014 or later; AFI 17-101, Risk Management Framework for Air Force Information Technology, 2 February 2017 or later; and applicable Air Force Research Laboratory (AFRL) RMF guidance and policies. Responsibilities include managing the implementation, documentation, and testing of applicable Information Assurance (IA) security controls; continuous monitoring; vulnerability remediation; and preparation and maintenance of security documentation and artifacts, including control assessment responses, network topology diagrams, hardware and software inventories, ports and protocols lists, and Plans of Action and Milestones (POA&Ms). The ISSM will also oversee Interim Authorization to Test (IATT) and Authorization to Operate (ATO) preparation and serve as the primary cybersecurity liaison among system owners, Information System Security Officers (ISSOs), engineers, program managers, security personnel, the Authorizing Official (AO), and government stakeholders. Additional Responsibilities Include, but are not Limited To: Serve as the Information System Security Manager (ISSM) for assigned information systems, classified networks, laboratories, flight-test environments, and Cross Domain Solutions (CDS). Establish and manage the system security program in accordance with DoDI 8510.01, AFI 17-101, Air Force Research Laboratory (AFRL) guidance, 25 AF guidance, and applicable customer policies and procedures. Direct and oversee Information System Security Officer (ISSO) activities and Risk Management Framework (RMF) execution, establishing priorities for security control implementation, assessment, remediation, and continuous monitoring. Review and approve, at the appropriate organizational level, security documentation and RMF work products prepared by ISSOs and technical personnel, including: System Security Plans (SSPs) and Security Assessment Reports (SARs). Plans of Action and Milestones (POA&Ms) and risk assessments. Security control implementation documentation, supporting evidence, and assessment artifacts. Continuous monitoring reports. Interim Authorization to Test (IATT) and Authorization to Operate (ATO) packages. Conduct, coordinate, and evaluate vulnerability scans, Assured Compliance Assessment Solution (ACAS) results, Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) reviews,