Information System Security Manager (ISSM), EPASS HB - US-UT-Ogd

Information System Security Manager (ISSM)




Location

US-UT-Ogden




Employment Status

Full time



Information System Security Manager 
Information System Security Manager, Senior  
Hill Air Force Base
Ogden, UT

HX5 is an award-winning provider of engineering, research and development, and technical services to clients such as NASA and the Department of Defense. Founded in 2004, HX5 is a fast-growing veteran- and woman-owned company with locations nationwide.

HX5 is currently seeking a qualified Information System Security Manager in support of the Aerospace Dominance Enabler Division at Hill Air Force Base in Ogden, UT. 

Essential Duties and Responsibilities:  

• 
  Provide ISSM support that will be the primary cybersecurity technical advisor to the Authorizing Official (AOs), Program Manager (PM) and Information System Owner (ISO). For base enclaves, the ISSM manages the installation cybersecurity program, typically as a function of the Wing Cybersecurity Office. That program ISSM may also serve as the system ISSM for the enclave and reports to the CS/CC as the PM for the base enclave.
  
• 
  Ensures the integration of cybersecurity into, and throughout the lifecycle of the IT, on behalf of the AO and in accordance with DoDI 8510.01
  
• 
  Completes and maintains required cybersecurity certification IAW AFMAN17-1303. Individuals in this position must be U.S. citizens
  
• 
  Ensures all AF IT cybersecurity-related documentation is current and accessible to properly authorized individuals. AFI17-101 6 FEBRUARY 2020 15
  
• 
  Supports the PM or ISO in maintaining current authorization to operate, and approval to connect and in implementing corrective actions identified in the plan of action and milestones
  
• 
  Coordinates, with the PM and AO staffs, development of an ISCM strategy and monitor any proposed or actual changes to the system and its environment
  
• 
  Continuously monitors the IT and environment for security-relevant events, assess proposed configuration changes for potential impact to the cybersecurity posture, and assess the quality of security controls implementation against performance indicators
  
• 
  Ensures cybersecurity-related events or configuration changes that impact AF IT authorization or adversely impact the security posture are formally reported to the AO and other affected parties, such as IOs and stewards and AOs of interconnected IT
  
• 
  Appoints IS Security Officers (ISSOs) and provides oversight to ensure ISSOs follow established cybersecurity policies and procedures IAW DoDI 8500.01
  
• 
  Ensures all ISSOs receive necessary technical training and obtain cybersecurity certification IAW AFMAN 17-1301, Computer Security (COMPUSEC), AFMAN 17-1303 and maintain proper clearances IAW DoDI 8500.01
  
• 
  Ensures the AF IT is acquired, documented, operated, used, maintained, and disposed of properly and IAW DoDI 5000.02 and DoDI 8510.01
  

Education and Experience: 
Must have one of the following combinations of education and experience:

• Bachelor’s degree, and twelve (12) years of directly related experience, five (5) of which must be in the DoD.
• OR twelve (12) years of directly related experience, eight (8) of which must be in the DoD.
• DoD 8570 compliant IAT Level II certification, and includes certifications such as: CompTIA Security+, CISSP is required.

Preferred Qualifications:

 Technical Skills

• EMASS administration, package management, and compliance reporting
• RMF lifecycle execution, control implementation, assessment preparation, and continuous monitoring
• NIST cybersecurity frameworks, including NIST SP 800‑53, 800‑37, 800‑171, and CSF
• CISSP‑level knowledge of security governance, risk management, and secure system design
• Cybersecurity program development and compliance oversight across DoD and federal environments
• Familiarity with the DoD acquisition lifecycle, milestone planning, and product support integration
• Strong understanding of DoD 5000 series acquisition processes and governance
• Proficient in RMF repositories, security documentation development, and ATO Artifact creation
• Experience applying cybersecurity standards to system engineering, configuration management, and lifecycle sustainment

Interpersonal Skills

• Strong coordination and communication skills
• Ability to work effectively in cross-functional teams
• Effective problem-solving and decision-making abilities
• Customer-focused support mindset

 Position Type/Expected Hours of Work:
This is a full-time position requiring 40 hours per week and offers a flexible work schedule Monday through Friday during core business hours.  

Other Position Requirements:

• Proof of U.S. Citizenship or U.S. Permanent Residency is a requirement for this position.
• Must be able to complete a U.S. government background investigation.
• Must hold active Secret clearance. 
• Must be able to travel, including air travel.

HX5 offers a competitive salary and benefits package to include:

• Medical/Dental/Vision Insurance
• 401(k) plan with Company Match
• Paid Holidays
• Paid Time Off
• Parental Leave 
• Life Insurance
• Tuition Reimbursement
• Medical and Dependent Care Flexible Spending Accounts
• Pet Insurance

HX5, LLC is an Equal Opportunity Employer that recruits and hires qualified candidates without regard to race, religion, sex, age, national origin, ancestry, citizenship, disability, or veteran status.

HX5, LLC is a Drug Free Workplace Employer.

ACCESSIBILITY NOTICE: 
If you need a reasonable accommodation for any part of the employment process due to a physical or mental disability, please call (850) 362-6551.

CJ