Information System Security Manager/Officer (ISSM/O)

Koniag Tech Infrastructure Solutions, LLC a Koniag Government Services company, is seeking an Information System Security Manager/Officer (ISSM/O) with TS/SCI security clearance to support KTIS And our government customer at Wright-Patterson AFB, OH.

We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.

The Information System Security Manager/Officer (ISSM/O) works as part of a team to provide cybersecurity support to an Air Force Materiel Command (AFMC) customer at Wright-Patterson AFB, Ohio. This position is responsible for ensuring information systems meet cybersecurity requirements and achieve Risk Management Framework (RMF) assessment and authorization within the Science and Technology (S&T) Authorizing Official (AO) boundary. Telework is not an option. These positions require the ability to work in a fast-paced, mission-critical environment with strict security. The successful candidate must demonstrate commitment to continuous learning and professional development to maintain currency with evolving technology and security landscapes.

Key Responsibilities:
Risk Management Framework (RMF) Process Management:
• Manage RMF processes to achieve system authorization primarily within S&T AO boundary
• Develop proactive planning strategies and efficient documentation processes
• Coordinate closely with system owners, authorizing officials, SCAs, and SCARs
• Develop and submit complete and accurate RMF packages that meet all applicable requirements
• Achieve Authority to Operate (ATO) or Interim Authority to Test and Evaluate (IATT) within reasonable timelines established with Government
Security Control Implementation & Support:
• Implement and maintain security controls aligned with sustainment requirements
• Develop and update System Security Plans (SSPs) and control family plans
• Create and maintain directorate cybersecurity policies
• Remediate vulnerabilities identified by SCAs/SCARs within established timelines
• Ensure Continuous Monitoring (ConMon) compliance
• Facilitate smooth transition to sustainment ownership and operation
Risk Management Support:
• Support risk management activities by providing documentation to SCAs/SCARs
• Develop and maintain risk management plans in coordination with assessment teams
• Serve as cybersecurity liaison between project teams and AO boundary representatives
• Assist project teams in creating and submitting RMF packages
• Support SCAs/SCARs with technical questions and documentation requirements
Security Documentation Management:
• Prepare and maintain required security documentation (SSPs, POA&Ms, etc.)
• Ensure documentation accuracy and compliance with applicable regulations
• Maintain version control processes and change management procedures
• Develop security-relevant documentation for future sustainment teams
• Create clear and complete documentation for system transitions
Policy & Compliance Management:
• Maintain current awareness of cybersecurity threats and vulnerabilities
• Ensure compliance with DoD, Air Force, and local security policies and directives
• Stay current on security guidance and ensure system compliance
• Monitor and report on ongoing compliance activities
Incident Response Support:
• Support incident response activities including investigation, containment, eradication, and recovery
• Document incident response processes and procedures for sustainment
• Maintain familiarity with existing Incident Response Plans (IRP) for supported systems
• Provide effective and efficient incident response support
Continuous Monitoring & Analysis:
• Implement and maintain continuous monitoring processes for ongoing security compliance
• Design monitoring processes for sustainable execution after transition to sustainment
• Develop and implement monitoring strategies
• Analyze security logs and report on security status
• Create sustainable monitoring frameworks for long-term system operation
Additional Security Duties:
• Support implementation of new security technologies and processes
• Assist with security awareness training programs
• Participate in security audits and assessments
• Support development of security-related standard operating procedures
• Attend regular cybersecurity meetings (weekly, monthly, quarterly)
• Organize cybersecurity-focused team meetings for RMF activities

Required Qualifications
Education & Experience:
• Bachelor's degree in Cybersecurity, Information Technology, Comput