Information System Security Manager

Key responsibilities:
-Certification and compliance: AFMAN 17-1303, ATO lifecycle, POA&M
-ISCM and monitoring: develop/execute ISCM strategy; detect/respond to security events; assess changes
-Security controls and risk: evaluate configuration changes; monitor controls vs. KPIs; report to AOs, IOs, stewards
-Training and personnel security: ensure ISSOs/privileged users have required training and clearances per DoDI 8500.01
-DoD/AF policy: DoDI 5000.02, 8510.01; AFI/AFMAN guidance
-Tools and assessment: Fortify, Checkmarx, SonarQube, AppScan; Jira, HP ALM, eMASS; CI/CD tools (Jenkins, Bitbucket)
-Agile/SDLC: SCRUM Master or Agile certs preferred

Qualifications to highlight:
-Education/experience: advanced degree + 10+ years (5+ DoD) or bachelor + 12+ years (5+ DoD); 15+ years with DoD relevance
-Certifications: IAM Level III equivalents (ISACA CISM, (ISC)2 CISSP, GIAC GSLC)
-Clearance: T3/Secret (must be maintained)

Strong experiences to cite:
-Leading certification activities and maintaining ATOs in DoD/AF environments
-Developing ISCM strategies and handling security events
-Assessing changes and validating controls; reporting to AOs/io/stewards
-Training ISSOs and managing access security
-Using security tools (Checkmarx, SonarQube, Fortify, AppScan) and tracking in Jira/eMASS
-Aligning DoD lifecycle processes with DoDI 5000.02 and 8510.01
-Integrating security requirements with agile development

Compensation $150,000.