Senior / SME Information Systems Security Manager (ISSM)

OSAAVA SERVICES
POSITION DESCRIPTION | GovCIO Subcontract Support
Senior / SME Information Systems Security Manager (ISSM) — RMF / ATEP
Location
Remote | U.S. location restrictions to be confirmed
Target start
January 1, 2027
Estimated base salary
$130,000–$160,000 annually | National remote market estimate; not approved
Employment type
To be confirmed
Security clearance
To be confirmed with customer
About OSAAVA Services
OSAAVA Services is a Service-Disabled Veteran-Owned Small Business (SDVOSB) supporting federal defense missions through cybersecurity, information technology, engineering, and technical services. We are recruiting for a position supporting GovCIO as a subcontractor on a U.S. Air Force-related effort.
Position Overview
We are seeking an experienced Information Systems Security Manager (ISSM) to support cybersecurity governance and authorization activities on a defense-related program. The anticipated work involves the Risk Management Framework (RMF) and the ATEP RMF process. The Senior / SME ISSM will provide expert-level leadership in security compliance, coordinate authorization documentation, and work with program stakeholders to maintain visibility into security risks and system authorization status. The exact program scope and system environment will be confirmed with the customer.
Key Responsibilities
• Coordinate RMF activities throughout system categorization, control selection, implementation, assessment, authorization, and ongoing monitoring.
• Lead or oversee preparation, maintenance, and quality review of cybersecurity authorization documentation and evidence.
• Coordinate with government cybersecurity representatives, system owners, engineers, ISSOs, and assessors to resolve authorization issues.
• Track security control implementation, assessment findings, Plans of Action and Milestones (POA&Ms), and remediation progress.
• Maintain system security posture reporting, risk registers, continuous monitoring deliverables, and audit readiness.
• Support authorization package activities and status tracking in eMASS where applicable.
• Advise program stakeholders on DoD security policy, NIST controls, compliance risks, and authorization dependencies.
• Support transition and continuity of RMF activities associated with the ATEP effort, as assigned.
Required Qualifications
• Extensive senior-level experience serving as an ISSM or DoD cybersecurity compliance/RMF lead, with demonstrated ownership of complex authorization activities.
• Expert-level knowledge of DoD RMF and NIST SP 800-37 / SP 800-53, including interpretation of authorization requirements and risk decisions.
• Demonstrated leadership preparing, reviewing, and overseeing security authorization packages, POA&Ms, and continuous monitoring artifacts.
• Proven ability to advise and coordinate senior government stakeholders, system owners, technical teams, and security assessors.
• Strong executive-level risk communication, cybersecurity governance, technical documentation, and issue-resolution skills.
• Ability to support a planned January 1, 2027 start date and work effectively in a remote setting.
Preferred Qualifications
• Prior direct experience supporting ATEP RMF activities.
• U.S. Air Force cybersecurity or information assurance mission experience.
• Hands-on eMASS experience and familiarity with Air Force-specific authorization workflows.
• Relevant DoD 8140-aligned qualifications or certifications such as CISSP, CISM, or CAP/CGRC, as applicable to the final labor category.
• Experience maintaining ATOs and coordinating security control assessments in operational DoD environments.
Equal Employment Opportunity
OSAAVA Services is an equal opportunity employer. Employment decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, or any other status protected by applicable law.