Information Systems Security Manager (ISSM)
The primary responsibility of the Information Systems Security Manager (ISSM) is to establish, document and monitor the
Customer’s cyber security program implementation plan, and ensure compliance with published DoD policies and
regulations governing these programs. The ISSM must have a working knowledge of cyber security policies and technical
cyber security protection measures, including the Risk Management Framework (RMF), DISA Security Technical
Implementation Guides (STIGs), Enterprise Mission Assurance Support Service (EMASS), and other applicable systems
and regulations. The ISSM will lead the effort to make risked based recommendations to authorizing officials for initial or
continued operation on the DoDIN.
Responsibilities of this position include:
Provide direct guidance on issues and tasks related to cybersecurity and the associated administration,
development, policy, plans, programs, and initiatives as the Information System Security Manager (ISSM).
Manage the Risk Management Framework (RMF) System Authorization process to ensure all customer systems
connected to the Army portion of the DoD Information Network (DoDIN) meet all established requirements.
Prepare the IA certification and accreditation documentation.
Assist with preparation of cybersecurity recommendations for the secure connection of systems and networks
operated by other organizations to systems operated under the approval of the Theater Authorizing Official
Provide Cybersecurity technical review, and validation, of all proposed IT projects.
Analyze requirements for Cybersecurity services and related support within the area of operations.
Evaluate cost benefit, economic and risk analysis in decision making process.
Execute the risk management framework (RMF) as defined in the National Institutes of Science and Technology
(NIST), Department of Defense (DoD), and Army guidance
Coach, mentor, and train personnel in RMF implementation, operation, and maintenance, including use of the
Enterprise Mission Assurance Support.
Review assigned IT capabilities for compliance with RMF and evaluates security risk of operating assigned
systems on the DoD Information Network (DoDIN).
Make risk-based recommendations to authorizing officials for continued or initial operation on the DoDIN.
Provide enclave IA guidance for development of the COOP.
Advise the DAA of changes affecting the enclave’s IA posture.
8+ years of experience in Information Assurance and Security
10+ years of management experience
Ability to perform IAM Level III functions listed in Table C4.T7. of DoD 8570.01-M Information Assurance
Workforce Improvement Program
Excellent documentation skills including experience creating and maintaining network and system diagrams
Knowledge of information assurance procedures and implementation of technologies to address security controls
Knowledge of current methodologies including Continuous Monitoring / Continuous ATO, Assess-Only, ATO
management for DevSecOps environments
Demonstrated oral and written communication skills
Must have and maintain IA baseline certification based on IAM III identified in DoD 8570.01-M Information
Assurance Workforce Improvement Program (one of the following): Certified Information Systems
Security Professional (CISSP), Certified Information Security Manager (CISM), GIAC Security Leadership
Certificate (GSLC), or Certified Chief Information Security Officer (CCISO)
Must be a U.S. Citizen
Must have an active DoD Secret Clearance, and the ability to hold and maintain a Top Secret Clearance
Master’s degree in information security and/or assurance
Experience with Nessus Security Center / ACAS or other system security scanner
GSEC, GSNA, CEH or similar certification desirable
Linux/Unix knowledge strongly desired
Familiarity with Army Networks including DoDIN and DCO Mission network