ISSM (Remote | DoD Secret)

Full Details of Job Post

Title: Information Systems Security Manager (ISSM)
Location: Remote
Clearance: Active Secret Clearance

About this role:

• Rackner is seeking a Information Systems Security Manager (ISSM) to support the AFRL/RG (AFWERX) Technical Operations Branch.
• AFWERX is the innovation arm of the Department of the Air Force (DAF) and accelerates agile and affordable capability transitions by teaming innovative technology developers with Airman and Guardian talent.
• The innovation arm of the Department of the Air Force and powered by the Air Force Research Laboratory (AFRL) supports both internal and external (federal and industry partners) users across multiple CONUS locations through client hardware support (NIPR, DREN) and cloud-based (e.g. IaaS, PaaS, SaaS) applications.
• Additionally, the program's Technical Operations Branch provides Risk Management Framework (RMF) and cybersecurity support to the different AFWERX divisions (i.e. AFVentures, Spark, Prime), including Flight Test Program Management (FTPM) support to both manned and unmanned flight tests.

We are looking for experience with:

• Bachelor of Arts (BA)/Bachelor of Science (BS) and 10 years of experience, three (3) of which must be in the DoD OR 15 years of directly related experience with proper certifications as described below., five (5) of which must be in the DoD
• Must have at least one of the following certifications (DoD 8570 IAM II or IAM III certified):
• CAP
• CASP+ CE
• CISM
• CISSP (or Associate)
• GSLC
• CCISO
• HCISPP
• Highly preferred to be Google Cloud Security Engineer, Google Workspace Engineer, and/or Google Cloud Architect certified

• Knowledge of risk management processes and requirements per the Risk Management Framework (RMF), to include building, managing, and submitting RMF packages in support of IT platforms, cloud/web-based applications, traditional applications, or embedded IT systems
• Advise senior management (e.g., CIO) on risk levels and security posture
• Assure successful implementation and functionality of security requirements and appropriate information technology (IT) policies and procedures that are consistent with the organization’s mission and goals
• Manage the monitoring of information security data sources to maintain organizational situational awareness
• Communicate the value of information technology (IT) security throughout all levels of the organization stakeholders
• Ensure that cybersecurity requirements are integrated into the continuity planning for that system and/or organization(s)
• Ensure plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc
• Ensure security improvement actions are evaluated, validated, and implemented as required
• Supervise or manage protective or corrective measures when a cybersecurity incident or vulnerability is discovered

Who We Are:

• Rackner is a software consultancy that builds cloud-native solutions for startups, enterprises, and the public sector.
• We are an energetic, growing consultancy with a passion for solving big problems for both startups and enterprises.
• We enable digital transformation for large organizations through the newest in distributed technologies as we are laser focused on end-to-end application development, DevSecOps, AI/ML and systems architecture and our methodology focuses on cloud-first and cost-effective innovation.
• Our customers hail from a diverse, ever growing list of industries.

Additional Info/Benefits

Rackner embraces  and promotes employee development and training and covers the cost of certifications relevant to a position and the technologies/services provided .  Fitness/Gym membership eligibility, weekly pay schedule and employee swag, snacks & events are offered as well!

• 401K with 100% matching up to 6%
• Highly competitive PTO
• Great health insurance with large network of providers
• Medical/Dental/Vision
• Life Insurance, and short & long term disability
• Industry-Leading Weekly Pay Schedule
• Home office & equipment plan

#ISSM #InformationSystemsSecurityManager #DoD #secret #AFWERX #DAF #agile #AFRL #NIPR #DREN #IaaS #PaaS #SaaS #IoC #TechnicalOperationsBranch #RiskManagementFramework #RMF #cybersecurity #FlightTestProgramManagement #FTPM #AFVentures #Spark #Prime #DoDIATIII #googlecloud #gcp