Information Systems Security Manager (ISSM)

Decision Technologies seeks a qualified Information System Security Manager (ISSM) to join our team in Austin, TX.

Position Description:

The Information System Security Manager (ISSM) is responsible for providing cybersecurity oversight, governance, and compliance management for the organization’s SIPRNet circuit and associated classified information systems. This role ensures full compliance with DoD, IC, and federal cybersecurity requirements, maintains system accreditation, and leads security operations supporting mission-critical classified environments.

Active Secret or TS/SCI (as required by the position/organization)

Responsibilities and Duties:

Cybersecurity Program Leadership

• Lead and manage the cybersecurity program for the SIPR circuit and all connected classified systems.
• Ensure full compliance with DoD, Intelligence Community, and federal cybersecurity policies including RMF, NIST SP 800-53, CNSSI 1253, and applicable DoD instructions.

Risk Management & Compliance

• Oversee the development, documentation, review, and maintenance of RMF artifacts including SSPs, CONOPS, POA&Ms, SARs, and continuous monitoring records within eMASS.
• Conduct or supervise risk assessments, vulnerability evaluations, and threat analysis.
• Identify residual risks and recommend appropriate mitigation strategies.
• Maintain the system’s Authorization to Operate (ATO) and ensure all continuous monitoring requirements are met.

System Hardening & Change Management

• Review and approve security-relevant configuration or software changes affecting the SIPR network.
• Validate implementation of STIGs, configuration baselines, security patches, and vulnerability remediation.
• Coordinate with network administrators, ISSOs, engineers, and security teams to ensure system hardening and compliance activities are executed correctly.

Boundary & Data Protection

• Ensure proper handling, transmission, and storage of classified data.
• Validate appropriate boundary protection mechanisms, enclave configurations, and physical security requirements for SIPR systems.

Audit, Inspection, & Documentation

• Maintain accurate, auditable security documentation and system records.
• Prepare required cybersecurity reports for inspections, audits, and system reviews.
• Lead remediation efforts addressing audit findings, compliance gaps, and security vulnerabilities.

Incident Response & Monitoring

• Manage cybersecurity incident response procedures for the SIPR environment.
• Coordinate reporting to government authorities as required by DoD policy.

Access Control & User Training

• Oversee account management, auditing, and access control enforcement.
• Ensure all SIPR users complete required cybersecurity training and understand proper classified handling procedures.

Communication & Stakeholder Coordination

• Brief leadership, participate in meetings, and engage with auditors, AOs/DAOs, and other cybersecurity stakeholders.
• Communicate technical security issues clearly to both technical and non-technical audiences.

Required Qualifications and Skills:

Technical Knowledge

• Deep understanding of DoD SIPRNet architecture and classified network handling rules.
• Proficiency in network security principles including firewalls, IDS/IPS, encryption technologies, and cross-domain constraints.
• Experience managing secure enclaves, boundary protections, and classified physical security requirements.
• Hands-on experience with vulnerability scanning and auditing tools such as ACAS/Nessus.

RMF & Security Governance

• In-depth knowledge of DoD Risk Management Framework lifecycle.
• Strong ability to create, review, and maintain RMF control evidence and accreditation documentation.
• Experience interacting with AOs, cybersecurity compliance teams, and inspection authorities.

Soft Skills

• Excellent written and verbal communication skills.
• Ability to prepare and deliver leadership briefings.
• Highly organized, detail-oriented, and capable of managing multiple concurrent tasks.

Certifications:

• DoD 8570/8140 IAM Level II or III (e.g., CAP, CISSP, CASP+, CISM, GSLC, or equivalent).

Education & Experience:

• Bachelor’s degree from an accredited university, OR CNSSI 4012 certificate OR ADQ GA7.
• 3–5 years of experience as an ISSM, ISSO, or similar cybersecurity leadership role.

Preferred/Additional Training:
Completion of one of the following is required or strongly preferred:

• NEC 2779 (CIN: A‑531‑0009)
• NEC 3372 (CIN W‑3B‑1500, EKMS Manager)
• A‑4C‑1340 (KMI)

Technical Tools Experience:

• ACAS, Nessus, audit tools, and configuration management systems.

Travel Requirements:

• Less than 10%.

Compensation:

Compensation at Decision Technologies, Inc. is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements.

Employee Benefits:

• Competitive Paid Time Off

• Comprehensive Medical, Dental and Vision Insurance

• Employee Assistance Programs

• Flexible Spending Accounts (Medical, Dependent Care & Commuter)

• Company-paid Short-Term, Long-Term, Life and AD&D Insurance

• 401(k) match

• Tuition Reimbursement

• Paid Certifications

Decision Technologies, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.