Espace
Information Systems Security Manager (ISSM)
Arlington, TX · Mid
No sponsorship$37k-$800kDetected 70 days ago
TypeScriptCSSLinuxCybersecurityPenetration TestingSIEMIncident ResponseSAPResearchCommunicationMentoring
About the role
- The Information Systems Security Manager (ISSM) serves as the primary authority responsible for the cybersecurity posture and compliance of all classified information systems operating within a Top Secret possessing facility under a Department of Defense (DoD) Facility Clearance (FCL).
- This role is pivotal in ensuring the organization meets all requirements set forth by the National Industrial Security Program Operating Manual (NISPOM), the Defense Counterintelligence and Security Agency (DCSA), and applicable Intelligence Community Directives (ICDs).
- The ISSM will serve as the authoritative point of contact to the Cognizant Security Authority (CSA) and Government Contracting Activity (GCA) for all matters relating to the authorization, operation, and continuous monitoring of classified information systems, including Sensitive Compartmented Information (SCI) systems where applicable
Responsibilities
- Lead the Assessment and Authorization (A&A) process for all classified IS under the Risk Management Framework (RMF) in accordance with NIST SP 800-37 and DAAPM.
- Prepare, maintain, and submit System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and Authorization to Operate (ATO) packages.
- Maintain and manage the System Security Authorization Agreement (SSAA) or equivalent documentation for all IS operating at the TS level or above.
- Develop, implement, and maintain facility-level Information Systems Security policies, procedures, and Standard Operating Procedures (SOPs).
- Implement and manage a Continuous Monitoring (ConMon) program for all authorized classified information systems.
- Maintain personnel access records and access control lists (ACLs) for all classified IS; ensure need-to-know verification prior to system access grants.
- Manage and enforce media protection, sanitization, and destruction procedures for classified storage media in accordance with NSA/CSS EPL requirements.
- We're intentional, we're unapologetically curious and we're 100% committed to innovate space-based communications and deliver actionable intelligence that will expand global economies, protect space and our planet and enhance our overall quality of life.
Requirements
- SCI eligibility required or must be obtainable within 6 months of hire.
- A minimum of 3 years of direct working knowledge of the NIST RMF process (NIST SP 800-37, 800-53, 800-171) and DoD Assessment Methodology (DAAPM).
- Experience preparing and managing ATOs, SSPs, SAPs, and POA&Ms for TS and SCI-level information systems.
- Proficiency with eMASS (Enterprise Mission Assurance Support Service) or equivalent GRC tool.
- Working knowledge of SIEM platforms, vulnerability scanners (e.g., ACAS/Nessus), and HBSS/endpoint security tools.
- IAM Level II or III certification required per DoD 8570.01-M / DoD 8140 (e.g., CISSP, CISM, GSLC, or equivalent).
- Master's degree or Bachelor's degree with equivalent work experience and certifications in Cybersecurity, Information Technology, Computer Science, or a related technical discipline, OR equivalent verifiable experience.
- Experience supporting Special Access Programs (SAPs) or Sensitive Compartmented Information Facilities (SCIFs).
- Familiarity with Cross Domain Solutions (CDS), data transfer processes, and CDSE/NSA approval workflows.
- Experience with LINUX and Windows hardened STIG baseline implementation and validation.
- Active Top Secret (TS) security clearance; SCI eligibility required or must be obtainable within 6 months of hire.
- Minimum of 10 years of progressive experience in information systems security within a DoD or Intelligence Community classified environment with 5 or more year's direct experience as an ISSM, ISSP, Security Control Assessor (SCA), or equivalent position
- Demonstrated ISSM or ISSO experience supporting DCSA-adjudicated classified IS programs under NISPOM/DAAPM.
- Current TS/SCI access with polygraph (CI or Full Scope).
Nice to have
- Additional certifications such as CASP+, CCSP, Security+, or CEH are a plus.
Compensation
- Develop and deliver annual IS security awareness training and role-based training for users of classified information systems.
Benefits
- Continuous learning and development
- Health and wellness care options
Company info
- We are building a highly-advanced low Earth orbit (LEO) space system that will fundamentally change the design, economics, manufacturing and service delivery associated with traditional satellite and terrestrial IoT systems.
- An opportunity to really make a difference
Visa & Work Authorization
- Active Top Secret (TS) security clearance; SCI eligibility required or must be obtainable within 6 months of hire
This listing is sourced directly from Espace's careers page and normalized into a canonical job model.