Information Systems Security Manager (ISSM)

As an Information Systems Security Manager (ISSM) I, my primary function is to serve as a principal advisor on all matters, technical and otherwise, involving the security of information systems I oversee. I will be supporting Special Access Programs (SAPs) for Department of Defense (DoD) agencies, including HQ Air Force and the Office of the Secretary of Defense. My responsibilities will include: - Overseeing the development, implementation, and evaluation of information system security program policy. - Developing and managing operational information systems security implementation policy based on the Risk Management Framework (RMF). - Advising customers on RMF assessment and authorization issues and performing risk assessments. - Ensuring all personnel receive the necessary technical and security training to fulfill their duties. - Developing and executing security assessment plans, maintaining authorization documentation, and instituting a Configuration Control Board (CCB) charter. - Responding to security incidents, investigating violations, and ensuring proper corrective measures are taken. - Evaluating threats and vulnerabilities, assessing system changes, and maintaining the security posture of authorization boundaries. - Conducting periodic assessments and ensuring configuration management for security-relevant changes. - Developing policies for Assured File Transfers (AFT) in accordance with JSIG. - Performing duties of the Information System Security Officer (ISSO) if required.