ISSM

Pueo is known for bringing the best talent and unique tools to every opportunity. Pueo's Parliament (aka workforce) is composed of professionals who are seeking the opportunity to work in a business organization that thrives on career development and independence. In support of mission and professional growth, our Parliament has supported the development of multiple patents, proprietary tools, and applications as well as trademarked processes.

Our organization emphasizes career development across multiple career environments (at the members own pace) and ensures those who contribute broadly are properly rewarded. Pueo has four career environments where every member of the parliament can participate. Each environment has opportunities available for all levels. Opportunities are framed by an employee's desires and capabilities, and we ensure challenges, growth, and unique experiences are available for employees at all levels.

Our Career Environments (Program, Functional, Service, and Leadership) provide numerous opportunities for employees to invest in their personal growth and those things that offer fulfillment. We invest in helping our members create and execute their career development plans. Our Pods (small teams of 5 or less) are comprised of personnel with similar skillsets to ensure mentorship, understanding, and peer support.

The ISSM shall possess the expertise and capability to serve as the ISSM for the United States Air Force Academy (USAFA), including the ability to define and staff a cybersecurity team. Acting as a technical advisor to USAFA leadership, the ISSM will be primarily responsible for sustaining the security posture of all USAFA information systems.

Key responsibilities include:

Governance and Compliance: Ensure full implementation and compliance with DoDI 8510.01 (Risk Management Framework for DoD IT), AFI 17-130 (Cybersecurity Program Management), and AFI 17-101 (RMF for Air Force IT).

Cybersecurity Program Development: Lead the development and execution of the organization's cybersecurity program, encompassing architecture, requirements, objectives, policies, personnel, and operational procedures.

Security Oversight: Manage cyber incident response activities and oversee network account access, including the creation and maintenance of account provisioning documentation.

RMF Execution: Operate within the RMF lifecycle, ensuring systems are properly categorized, controls are selected and implemented, and continuous monitoring is maintained.

Independence and Authority: Function independently of ISSOs and ISSEs, maintaining objectivity in security oversight and risk assessments.

Policy Alignment: Fulfill responsibilities as defined in DoDI 8500.01 (Cybersecurity), DoDI 8510.01, and AFI 17-101, ensuring alignment with DoD and Air Force cybersecurity directives.

Reference Standards: Utilize the DoD RMF Knowledge Site for guidance on ISSM role expectations and best practices: RMF Roles – DoD RMF Knowledge Site

Qualifications: At least five (5) years of experience in the field.

Degree Requirements (if applicable) Bachelor of Science degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science, from an Accreditation Board for Engineering and Technology (ABET) accredited or Certified Association Executive (CAE) designated institution

Certification Requirements (if applicable): CISM or CISSO or FITSP-M or GCIA or GCSA or GCIH or GSLC or GICSP or CISSP-ISSMP or CISSP

Pueo is an equal employment opportunity employer and affirmative action employer. All interested individuals will receive consideration and will not be discriminated against on the basis of race, color, religion, sex, national origin, disability, age, sexual orientation, gender identity, genetic information, or protected veteran status. Pueo takes affirmative action in support of its policy to advance diversity and inclusion of individuals who are minorities, women, protected veterans, and individuals with disabilities.