Information System Security Manager (ISSM)

Modern Technology Solutions, Inc. (MTSI) is seeking an Information System Security Manager (ISSM) to work within the Autonomy Portfolio at Defense Innovation Unit (DIU).

The DIU supports the Department of Defense’s (DoD) efforts to create and foster commercial partnerships within multiple innovation ecosystems across the United States.

It is staffed by active-duty and reserve personnel, government civilians and contracted consultants.

This position allows for the ability to telework.

Close proximity to one of the MTSI office locations is preferred (Las Vegas, NV; Washington, DC; Mt View, CA; Huntsville, AL; or Dayton, OH).

The ISSM will lead and manage the process for enabling authority to operate (ATO) on commercial systems contracted under DIU led or supported efforts.

This capability, to organically certify autonomous and other systems, is key to bringing cutting edge technology to the warfighter in the timeliest manner possible.

Candidates should have a strong desire to innovate and push the boundaries of a “legacy” approach.

The ISSM should be comfortable navigating the existing ATO system but also willing to challenge and improve it.

This role will be critical to DoD’s continued efforts to streamline acquisitions and implementation of commercial technology; the impact will be widespread and highly valued by warfighters.

• Assemble the security authorization package and submit the package to the Authorizing Official (AO). This package consists of the security plan, the security assessment report (SAR), the plan of action and milestones (POA&M), and appropriate documentation for any security controls that are being satisfied through inheritance (e.g., security authorization packages, contract documents, memorandums of agreement (MOAs), and service level agreements (SLAs)).
• Support implementation of the risk management framework (RMF).
• Maintain awareness of service-level changes to internal Authority to Operate processes to facilitate reciprocity of the IS across the department.
• Identify the security requirements provided by the organization as common requirements for organizational information systems and document the requirements in the AO Determination Brief and continuous monitoring strategy.