Lead and coordinate governance, risk & compliance activities, including NIST-based security plans, ATO renewals, disaster recovery documentation, and incident response for a local Lansing, MI office.
Responsibilities
Lead the creation, review, and maintenance of System Security Plans (SSPs) in alignment with NIST and organizational security standards.
Coordinate Authority to Operate (ATO) renewals and ensure continuous compliance.
Maintain and update Disaster Recovery Plans (DRPs).
Review security risk assessments and recommend corrective actions.
Manage Plans of Action & Milestones (POA&Ms) and track remediation activities.
The ISSM will perform Information Assurance (IA) and Computer Network Defense (CND) functions, supporting multi-tier functions including systems engineering, audit/inspection, and vulnerability management.
Responsibilities
Perform a variety of Information Assurance (IA) and Computer Network Defense (CND) functions
Provide support for a program, organization, system, or enclave's information assurance program
Provide security certification test and evaluation of assets, vulnerability management and response, security assessments, and customer support
Provide support for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies
Maintain operational security posture for an information system or program
Requirements
Bachelor's degree from an accredited institute in an area applicable to the position
Nice to have: Experience working in a DoD or IC environment
The Senior Information Assurance Specialist provides advanced cybersecurity, information assurance, and risk management expertise in support of the FEMA Countering Weapons of Mass Destruction (CWMD) mission. This position is responsible for developing, implementing, and evaluating cybersecurity strategies, policies, standards, and technical solutions designed to protect mission-critical systems, networks, applications, and sensitive information.
Compensation
Actual salary will be based on a variety of factors including but not limited to experience, geographic location, contract affordability, internal equity, education, and certifications.
Responsibilities
Develop, implement, and maintain information assurance policies, procedures, technical standards, and security controls in accordance with federal cybersecurity requirements.
Conduct cybersecurity risk assessments, vulnerability assessments, and security compliance reviews to identify potential threats and recommend appropriate mitigation strategies.
Support the implementation and maintenance of the Risk Management Framework (RMF), including security categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
Develop, review, and maintain Authorization to Operate (ATO) documentation, System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), Security Assessment Reports (SARs), and other required security artifacts.
Evaluate system architectures, hardware, firmware, software, and applications to identify security weaknesses and ensure compliance with established security requirements.
Secure the system by designing-in necessary countermeasures and engineering-out vulnerabilities throughout the lifecycle of the program
Fulfill the ISSE responsibilities defined in DoD Instructions 8500.01 and 8510.01 and AFI17-101 Risk Management Framework (RMF) for the Air Force Information Technology (IT)
Assist the program manager and Information Systems Security Manager (ISSM) in working with the assessor on certain aspects of the Risk Assessment Report, such as determining the likelihood of a threat source initiating a threat event (e.g., an attack) against a vulnerability (e.g., a non-compliant security control), as well as the likelihood of success
Support efforts to integrate Cybersecurity throughout the lifecycle of IT systems, including the development and review of Cybersecurity-related artifacts, such as System Security Plans, Cyber Security Strategies, Cybersecurity Impact Assessments, policies, plans, and procedures
Manage efforts to continually assess activities and controls to secure information, including gaps in security and identify solutions to mitigate risks, including business processes, technical controls, and policy improvements
Requirements
BS/BA Degree (typically in Cybersecurity, Computer Science, Information Technologies, etc.)
Provide information assurance support for a program in the Fort Meade, Maryland area in support of the Intelligence Community.
Compensation
In compliance with pay transparency guidelines, the annual base salary range for this position is $160,000 - $200,000.
Responsibilities
Provides support for a program, organization, system, or enclave’s information assurance program
Provides support for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies
Maintains operational security posture for an information system or program to ensure information systems security policies, standards, and procedures are established and followed
Assists with the management of security aspects of the information system and performs day-to-day security operations of the system
Evaluates security solutions to ensure they meet security requirements for processing classified information
Requirements
Bachelor’s degree in Computer Science or related discipline from an accredited college or university
Provide technical and programmatic support for network and information security systems, ensuring compliance with federal laws and regulations, designing, developing, and implementing security requirements within business processes, and supporting certification and accreditation efforts.
Locations (2)
Boston, Massachusetts, United States
Dayton, Ohio, United States
Responsibilities
Assist in developing and integrating security requirements within business processes
Support certification and accreditation efforts, ensuring compliance with frameworks such as DIACAP, NIACAP, and NIST SP 800-37
Conduct security assessments and vulnerability analyses to identify and mitigate risks
Develop and complete system security plans and contingency plans
Perform security testing and compliance verification for network and system configurations
Support cybersecurity operations, risk management, and compliance activities within a Department of Defense environment.
Compensation
The proposed salary range for this position is: $86,600 - $181,800
Responsibilities
Support the ISSM in maintaining the operational cybersecurity posture of assigned information systems, programs, and enclaves.
Provide cybersecurity oversight and support for Assessment and Authorization (A&A) activities in accordance with FISMA, DoD requirements, and the Risk Management Framework (RMF).
Develop, review, and maintain System Security Plans (SSPs), security authorization packages, and supporting documentation required to obtain and maintain Authorities to Operate (ATOs).
Review authorization packages for completeness, including Control Correlation Identifiers (CCIs), Security Control Assessor–Validator (SCA-V) results, STIGs, POA&Ms, and cybersecurity strategies.
Conduct vulnerability assessments using ACAS, Nessus, and other approved security scanning tools to identify risks and recommend remediation.
Requirements
High school diploma or GED with a minimum of 6 years of relevant experience
Bachelor's degree with a minimum of 2 years of relevant experience
Nice to have: Experience independently managing complex ATO submissions and coordinating with Security Control Assessors (SCAs) and Authorizing Officials (AOs)
Serve as the primary authority for ensuring mission‑critical space systems and enterprise information systems achieve and maintain authorization to operate in compliance with national security requirements.
Responsibilities
Serve as the primary liaison between system owners, engineering teams, and Government Authorizing Officials (AOs)
Translate security policy into system requirements, manage security authorization packages, and ensure continuous monitoring of security controls
Lead security categorization activities per CNSSI 53, determining appropriate Impact Levels (IL) and establishing control overlays for all national security systems
Develop and maintain system security architecture documentation, including data flow diagrams, security boundary definitions, and control inheritance mappings
Coordinate with system owners and engineering teams to identify security control implementation requirements and validate that technical solutions meet policy mandates
Requirements
BS degree in Computer Science, Cybersecurity, Information Systems, or related technical discipline
Information Systems Security Manager (ISSM)NewMantis Security Corporation
Information Systems Security Manager (ISSM)Riverside Research Institute · Beavercreek, US
Senior Information Assurance SpecialistValidaTek · US
Cyber Anst Sr PrinBAE Systems · US
Information System Security Officer (ISSO)Aether Aerospace · Boston, US+1 more
Information Systems Security Officer 2T-Rex Solutions · Fort Meade, US
Information System Security Officer (ISSO)Caci · Annapolis Junction, US