Information Systems Security Manager (ISSM)

Job description

**Be Challenged and Make a Difference** In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture. **Description of Task to be Performed:** AnaVation is seeking a highly motivated Information Systems Security Manager (ISSM) who is responsible for cybersecurity engineering, cyber policy, and Risk Management Framework (RMF) activities supporting Department of Defense software factories and enterprise cloud environments. The ISSM will serve as the cybersecurity lead supporting one or more agile teams, integrating directly with Government leadership, Cyber Operations Teams (COT), Cyber Penetration Teams (CPT), Product Owners, Software Engineers, and DevSecOps personnel to maintain secure cloud-native capabilities while accelerating software delivery through Continuous Authority to Operate (cATO). This position supports enterprise cybersecurity operations spanning multiple mission value streams and classified environments, ensuring secure software delivery while balancing mission execution, cybersecurity risk, and compliance with Department of Defense policies. The position requires full-time support within classified environments in San Antonio, Texas, with routine collaboration across mission engineering, cybersecurity, operations, and acquisition organizations. **Position Responsibilities:** The ISSM will provide technical leadership supporting cybersecurity engineering, RMF execution, and continuous cybersecurity operations across software delivery environments. **Responsibilities include:** - Lead RMF implementation supporting initial ATOs and Continuous ATO (cATO). - Serve as the cybersecurity lead supporting multiple mission value streams. - Develop and maintain RMF authorization packages including SSPs, SARs, POA&Ms and supporting artifacts. - Coordinate cybersecurity assessments with Authorizing Officials, Security Control Assessors, penetration testing teams, and engineering organizations. - Integrate cybersecurity requirements into Agile and SAFe software development activities. - Support planning, execution, remediation, and continuous monitoring. - Ensure cybersecurity controls remain operational across development, testing, staging, and production environments. - Coordinate vulnerability management, STIG implementation, POA&M tracking, and security control validation. - Support Zero Trust implementation, cloud security, Kubernetes/OpenShift security, container hardening, and DevSecOps pipeline security. - Evaluate cybersecurity risks and provide mitigation recommendations supporting mission operations. - Support annual cyber assessments, inspections, and operational readiness activities. - Develop executive-level briefings, risk assessments, and cybersecurity recommendations. - Support operations across Unclassified, Secret, and SCI environments as required. ### Required Qualifications: - **Clearance:** U.S. Citizen, TS/SCI cleared within last 2 years; CI Polygraph within last 5 years - **Education:**Bachelor’s degree in Cybersecurity, Computer Science, Engineering, Information Technology, or related field - **Certification:** One or more of the following: CISSP, CASP+, Security+ or Equivalent DoD 8140 certification - **Location:**Full-time on-site in San Antonio, TX. - **Experience and knowledge**: - Nine or more years supporting Department of Defense cybersecurity missions. - Nine or more years serving as an ISSM, ISSE, or senior cybersecurity engineer. - Experience implementing the Risk Management Framework (RMF). - Experience achieving and maintaining Authority to Operate (ATO). - Experience supporting Continuous Monitoring programs. - Experience supporting DevSecOps environments. - Experience supporting Agile or SAFe software development. - Experience supporting enterprise cloud environments. - Knowledge of NIST RMF, NIST 800-53, CNSSI guidance, DoD cybersecurity policy, and STIG implementation. - Experience briefing senior Government leadership. - Excellent written and verbal communication skills. ### Preferred Qualifications: - **Clearance:** TS/SCI w/CI Poly - **Education:** Advanced degree in Cybersecurity, Computer Science, Engineering, Information Assurance, or related field. - **Certification:** One or more of the following: CISSP-ISSMP, AWS Security Specialty, Certified Cloud Security Professional (CCSP). - **Experience an Knowledge:** - Nine or more years supporting DoD cybersecurity missions. - Experience supporting software factories. - Experience supporting Kubernetes and OpenShift. - Experience supporting Iron Bank or hardened container environments. - Experience supporting Continuous ATO (cATO). - Experience implementing Zero Trust architectures. - Experience supporting enterprise DevSecOps pipelines. - Experience supporting IL4/IL5/IL6 cloud environments. - Experience supporting software factories. - Experience supporting Cyber Operations Teams. - Experience supporting Cyber Penetration Teams. - Experience supporting multiple military services and Combatant Commands.