# Program Information System Security Manager (P-ISSM)

**Company**: Leidos
**Location**: Huntsville, AL
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $107,900.00 - $195,050.00
**Category**: Security
**Industry**: Technology

**Apply**: https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Huntsville-AL/Program-Information-System-Security-Manager_R-00195220?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_15529a02-29f

## Description

We are seeking a Program Information System Security Manager (P-ISSM) to join our Information Assurance (IA) team in Huntsville, AL. As a P-ISSM, you will report to the Collateral Information System Security Manager (ISSM) and play a valuable role in leading a team of Information System Security Officers (ISSOs) to deliver classified authorization and cybersecurity compliance support to programs operating on DCSA-authorized networks.

**Responsibilities:**

- Provide personnel management for a team of ISSOs, including employee check-ins, performance plans and reviews, training, professional development, and coaching.

- Provide technical oversight and quality review of ISSO assessments, authorization artifacts, and configuration management reviews.

- Serve as the Program ISSM for assigned classified information systems, working with the Collateral ISSM to develop, implement, and maintain security policies, procedures, and documentation.

- Lead Authorization to Operate (ATO) efforts and ongoing authorization activities.

- Review and certify authorization packages for submission to the Authorizing Official (AO).

- Act as the primary Information Assurance point of contact for Program Managers, Facility Security Officers, and program personnel.

- Develop risk-based solutions to complex technical and compliance issues.

- Lead Configuration Management efforts and chair or participate in the Change Control Board (CCB).

- Oversee continuous monitoring, including vulnerability scanning and remediation tracking.

- Direct preparation for DCSA Cyber Operational Readiness Assessments (CORA), Security Vulnerability Assessments (SVA), On-Site Verifications (OSVs), and other government cybersecurity inspections.

- Investigate information system security incidents and violations.

- Oversee media sanitization, declassification, and hardware release.

- Perform risk and vulnerability assessments and security audits.

- Evaluate and implement new cybersecurity processes, technologies, and tools.

- Prepare and present status reporting to the Collateral ISSM.

- Develop and deliver information system security training and awareness for users, privileged users, and ISSOs.

**Requirements:**

- Bachelor's degree with 8+ years of relevant cybersecurity, information technology, information assurance, or information systems security experience, or Master's degree with 6+ years of relevant experience.

- Active DoD Secret clearance, with the ability to obtain and maintain a Top Secret clearance.

- Industry certification required by DoD 8140 policy and aligned to the DoD Cyber Workforce Framework (DCWF) Information Systems Security Manager work role.

- Working knowledge of the Risk Management Framework (RMF), System Security Plans, and activities for receiving and maintaining information system authorization.

- Working knowledge of the National Industrial Security Program Operating Manual (NISPOM) and the DCSA Assessment and Authorization Guide (DAAG).

- Proficiency with the Enterprise Mission Assurance Support Service (eMASS).

- Experience with vulnerability management, compliance, and security monitoring tools.

**Preferred Qualifications:**

- High level of proficiency with the DCSA instance of eMASS or equivalent.

- Experience preparing for and supporting DCSA On-Site Validations (OSVs), CORA, SVA, or other government cybersecurity inspections.

- Familiarity with DoD classified information systems, including SIPRNet, SDREN or other classified computing environments.

- Experience with tools such as Splunk, Trellix, Tenable/ACAS, SCAP Compliance Checker, and STIG Viewer.

- Working knowledge of Windows and Linux operating systems, Active Directory, virtualization, and enterprise identity management solutions.

- Familiarity with cyber incident response activities.

- Prior experience managing teams of 3 or more individuals.

## Skills

### Required
- Risk Management Framework (RMF)
- National Industrial Security Program Operating Manual (NISPOM)
- DCSA Assessment and Authorization Guide (DAAG)
- Enterprise Mission Assurance Support Service (eMASS)
- Vulnerability management
- Compliance
- Security monitoring
- Information Systems Security Manager
- Cybersecurity
- Information assurance
- Information systems security

### Nice to have
- DCSA instance of eMASS
- On-Site Validations (OSVs)
- CORA
- SVA
- Splunk
- Trellix
- Tenable/ACAS
- SCAP Compliance Checker
- STIG Viewer
- Windows and Linux operating systems
- Active Directory
- Virtualization
- Enterprise identity management solutions
- Cyber incident response

---

Source: [Apply at leidos.wd5.myworkdayjobs.com](https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Huntsville-AL/Program-Information-System-Security-Manager_R-00195220?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)