Information System Security Manager (ISSM)

**Recruiters please do NOT contact Advent Services**

A leader in supporting clients in technically demanding industries, Advent's capabilities and services promote innovation & empower our partners to manage risk, protect the information, and achieve organizational objectives. We are proud of our ability to support mission-critical systems in every phase of their lifecycle to ensure our nation’s forces can accomplish their mission.

Position: INFORMATION SYSTEM SECURITY MANAGER (ISSM)

Location: Work will be accomplished at the TSRL facility – Joint Base San Antonio-Fort Sam Houston, Building 3260, San Antonio, Texas.

Schedule: Work schedule is normally M-F 0700 to 1700.

Mandatory Qualifications

The contractor employee shall possess a minimum of a Bachelor of Science Degree in Information Technology or Cybersecurity demonstrated by a copy of the degree.

The contractor employee shall have a minimum of five (5) years of demonstrated experience working Risk Management Framework (RMF) requirements and providing cybersecurity services with no more than 3 consecutive years of lapse in cyberspace work.

The contractor employee shall possess the required Information Technology or Cybersecurity education, training, or certifications IAW DoDM 8140.03 and current Government directives, regulations, and policies for the role, or labor category, it is fulfilling (reference DFARS 252.239-7001).

The contractor employee shall possess a current, valid Security Plus Certification.

The contractor employee shall possess Intermediate Level Cybersecurity Work Role experience.

Highly Desired Qualifications

Possesses current Secret Clearance.

Tasks

The contractor employee shall provide ISSM cybersecurity support for NIPRNet, DREN, RDTE, SIPRNet, and standalone enclaves/systems.

The contractor employee shall perform the Information System Security Manager (ISSM), 8140 Cyberwarfare Code of 722 duties to include formally validating and verifying that all administrative and technical personnel meet the mandatory baseline certification and training requirements of DoD 8570.01-M / DoDI 8140 prior to granting elevated system access; administering and maintaining signed Privileged Access Agreements (PAAs); and conducting recurring audits of all privileged accounts.

Enterprise Cybersecurity Support

The contractor employee shall serve as a cybersecurity consultant for unit technicians.

The contractor employee shall perform all tasks necessary to administer, coordinate, and track compliance with TSRL enterprise cybersecurity architecture, strategy, plans, and supplemental policy for the entire distributed AFRL organization.

The contractor employee shall ensure Risk Management Framework (RMF) requirements are met, Authority to Operate (ATO) is granted and remains valid, all security-related documentation is kept up-to-date, and supported units have a reliable team of cybersecurity experts.

The contractor employee shall assist in configuration management process reviews and maintenance to ensure appropriate secure mechanisms are in place, update RMF requirements, and support internal and external entity audits and inspections.

The contractor employee shall perform data entry, monitoring, and provide AFRL organization assistance to maintain AFRL data and database organization structures within the IT portfolio in the Information Technology Investment Portfolio System (ITIPS), AFRL Risk Management Framework Workflow and Enterprise Mission Assurance Support Service (eMASS) systems.

The contractor employee shall achieve and continuously maintain the Authorization to Operate (ATO) for TSRL, related subsystems; NIST 800-53, Rev 5, Security and Privacy Controls for Federal Information Systems and Organizations; Committee on National Security Systems Instruction No. 1253 (CNSSI 1253, Rev 4), Security Categorization and Control Selection for National Security Systems; DODI 8510.01, Risk Management Framework for DoD Systems; and DISAI 270-50-9, Life Cycle Sustainment Planning, among other risk management framework directives.

The contractor employee shall advise senior management and Authorizing Official on risk levels, security posture, and changes affecting the organization’s cybersecurity posture.

The contractor employee shall assess threats to and vulnerabilities of computer systems/enclaves to develop a security risk profile. Shall conduct technical risk assessments to identify, document, and mitigate vulnerabilities across computer systems and enclaves.

The contractor employee shall collect and maintain data needed to meet system/enclave cybersecurity reporting. Shall maintain a digital eMASS system package repository on the authorized Information System (IS).

The contractor employee shall administer and track all relevant systems/enclaves within Enterprise Mission Assurance Support Service (eMASS) and ensure the ATO is current.

The contractor employee shall prepare, distribute, and maintain plans, instructions, and standard operating procedures (SOPs) concerning system security, for example; Body of Evidence documents, System Security Plans, Security Assessment Reports (SAR), Plan of Actions and Milestones (POAM), risk assessment reports, topology diagrams, software lists, and hardware list.

The contractor employee shall ensure plans of action and milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc.

The contractor employee shall maintain artifacts specified within the ATO/eMASS package such that they can be inspected semi-annually and any changes to ATO required documentation must be uploaded as an artifact in eMASS within three (3) business days.

The contractor employee shall maintain system hardening checklists (STIGs) and implement documented remediation plans (fix-actions) to resolve findings from official cybersecurity audits and inspections.

The contractor employee shall support cybersecurity inspections and audits by internal and external Government agencies, as necessary.

The contractor employee shall coordinate with the TSRL IT lead to implement changes within eMASS; implement, assess, manage, and monitor eMASS security controls and eMASS assessment procedures (APs); shall ensure precautions are in place such that other team members’ eMASS data is not erroneously overwritten.

The contractor employee shall utilize Assured Compliance Assessment Solution (ACAS), or other AF-approved scanning software, to accomplish audit controls and interpret vulnerability scanner results to identify vulnerabilities.

The contractor employee shall conduct application vulnerability assessments and perform technical and non-technical risk and vulnerability assessments of relevant technology focus areas to include applications/software.

The contractor employee shall ensure implementation of Information Assurance Vulnerability Management (IAVM) dissemination, reporting, and compliance procedures.

The contractor employee shall apply cybersecurity strategy to cloud computing service and deployment models.

The contractor employee shall perform applicable training and ensure cybersecurity training requirements have been satisfied by all TSRL users for continued network access.

The contractor employee shall execute logical system access onboarding and offboarding programs, for example maintaining up-to-date Standard Operating Procedures (SOPs) for the submission and routing of DD Form 2875s, and serving as the central coordinator for all organizational accounts.

The contractor employee shall schedule and complete quarterly destruction of media in accordance with AF and local policies.

The contractor employee shall a ttend in-person or virtual cybersecurity-related meetings, as required, and provide meeting minutes to support RMF requirements.

The contractor employee shall collaborate in system discovery and unit discussions to categ