Information Systems Security Manager (ISSM)

Effective 27 September 2025, federal agencies may only accept resumes up to two pages in length to comply with the OPM Merit Hiring Plan. To ensure your resume can be considered further for opportunities, please resubmit a resume that does not exceed two pages. Please see additional recommendations for formatting your resume at the following link: https://help.test.usajobs.gov/faq/application/documents/resume/page-limit. AFLCMC encourages two-page resumes. Be sure to include your contact information, relevant experience (with information on day/month/year experience began and ended), and information on education, certifications or licensures, and three professional references.

Come be a part of something big! Fueled by innovation, talent, and ambition, the Air Force Civilian Service (AFCS) is seeking cybersecurity professionals to protect and deploy war-winning capabilities for the United States Air Force. This isn't just another IT job; it's a commitment to national security.

The Role

The Air Force Civilian Service (AFCS) is looking for a Full-Time Information Systems Security Manager (ISSM) (NH-2210-03) to join the Air Force Life Cycle Management Center (AFLCMC) at Hanscom AFB, MA.

This position may close at any time.

Apply Now!

Salary: $101,375 to $156,715 per year (Hanscom AFB Locality)

Incentives: Recruitment, Retention, and Relocation incentives may be available for highly qualified candidates.

Position Summary

As a Program ISSM, you will be the cornerstone of the cybersecurity posture for mission-critical Air Force systems. You are the senior security leader responsible for navigating the complexities of DoD regulations and real-world threats. We are seeking a proactive leader who not only understands security procedures but can also analyze emerging risks, implement effective mitigations, and clearly communicate the security landscape to program leadership.

Qualifications & Requirements

U.S. Citizenship is required.

Security Clearance: You must possess a current and active Top Secret security clearance. Candidates with active TS/SCI are highly preferred. This is a condition of employment.

Certifications: You must hold a current DoD 8140/8570 IAM Level II or III certification. The most common are CISSP or CISM.

Experience: 3-10 years of hands-on experience in information security, information assurance, or cybersecurity, with a clear progression of responsibilities.

Education: A bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related technical field is highly desired.

Key Responsibilities

Lead Risk Management Framework (RMF) Execution: Drive the entire assessment and authorization (A&A) lifecycle for complex systems to achieve and maintain their Authority to Operate (ATO). This includes developing and maintaining System Security Plans (SSPs) and managing Plans of Action and Milestones (POA&Ms).

Develop & Enforce Security Policy: Architect, implement, and enforce security policies and procedures aligned with NIST, CNSSI, and other DoD standards to ensure a robust and compliant security posture.

Oversee Vulnerability & Incident Management: Direct the vulnerability management program using tools like Nessus and ACAS. Lead and support incident response activities from detection and investigation through to reporting and recovery.

Provide Technical Security Leadership: Serve as the security subject matter expert, applying a deep understanding of network architecture, operating systems (Windows/Linux), and security tools (SIEM, Splunk, etc.) to safeguard the entire information ecosystem.

To receive additional information about current and future job openings with AFCS via email notification, please subscribe at www.Afciviliancareers.com and sign up to “Get Career Updates."

AFCS is an Equal Opportunity Employer.