Pending Contract Award Mission Objectives -
The Team Manager / ISSO serves as the senior on-site leader for TeAM's JWICS Support Modernization effort at HQ AMC and concurrently as the lead ISSO and RMF practitioner for AMC's JWICS portfolio at Redstone. This combined position: - Provides program-level management and senior IA policy/compliance leadership for AMC G2's JWICS environment.
- Ensures day-to-day execution of the full Risk Management Framework (RMF) lifecycle for assigned JWICS systems and enclaves in eMASS.
- Ensures all contract tasks (RMF, COMSEC, cybersecurity program development, Tier 1 support, and JWICS operating environment assessments) are integrated and executed to meet or exceed the Government's =95% performance standards.
Position Responsibility Summary Program Leadership & Customer Interface - Serve as the single point of contact with the Government for all technical and management aspects of the contract, providing overall leadership, planning, and direction to the JWICS support team at all tech locations.
- Provide senior IA policy and compliance expertise to shape and oversee the AMC JWICS Cybersecurity Program, including the development and maintenance of internal plans, policies, and SOPs aligned with DoD, Army, DIA, and NIST guidance.
- Integrate and coordinate all contractor and subcontractor activities across:
- Information Technology Compliance Support (RMF, COMSEC, cybersecurity program), Tier 1 Support, and JWICS Operating Environment assessments, ensuring seamless mission support and consistent service levels across Redstone, Rock Island, Aberdeen, and AMCOM.
- Lead development and execution of the Transition-In and Transition-Out Plans, including personnel shadowing, knowledge transfer, inventory and documentation turnover, and ensuring no degradation of service during transition periods.
- Establish and maintain the Quality Control Plan (QCP) and associated performance management processes to meet QASP metrics (e.g., RMF/eMASS update timeliness, vulnerability remediation windows, Tier 1 responsiveness, COMSEC reporting).
- Identify issues, risks, and performance shortfalls early; develop and implement corrective action plans; and routinely brief AMC leadership (e.g., G-2, AMIS-IN/SE/SEP, P-ISSM, AO) on status, risk posture, and mission impacts.
- Ensure the professional and ethical behavior of all contractor and subcontractor personnel and enforce compliance with all applicable security, OPSEC, training, and access requirements.
ISSO / RMF Execution Responsibilities - Lead the comprehensive RMF lifecycle management for assigned JWICS systems within the AMC eMASS portfolio, covering categorization, control selection and implementation, assessment, authorization, and continuous monitoring.
- Develop, maintain, and update system security documentation for JWICS systems, to include:
- System Security Plans (SSPs)
- Security Assessment Reports (SARs)
- Plans of Action and Milestones (POA&Ms)
- Security control traceability matrices
- Risk assessments and other RMF artifacts in accordance with NIST, DoD, and Army RMF guidance.
- Collaborate with the Program ISSM/P-ISSM, AO, AODRs, system owners, and other ISSOs to optimize RMF workflows and coordinate approvals for system changes, boundary updates, new capabilities, and re-authorizations.
- Implement and manage a robust continuous monitoring strategy for JWICS systems, including:
- Vulnerability scanning (e.g., ACAS/Tenable)
- Configuration management and baseline enforcement
- Control assessments and security test & evaluation activities
- Security log reviews and integration with SIEM/monitoring tools
and ensure that results are accurately captured in eMASS and associated tools. - Support and, where appropriate, lead cybersecurity assessments of JWICS computing environments to identify vulnerabilities and non-compliance with applicable IA standards; recommend mitigations; and track remediation through closure.
- Provide RMF and security engineering input to mission mapping and cyberspace terrain mapping activities, ensuring that mission dependencies, cyber terrain, and authorization boundaries are clearly defined and documented to support AO risk decisions and Mission Assurance processes.
- Produce timely RMF/eMASS updates and risk reports that enable AMC to meet or exceed QASP measures (e.g., =95% of priority systems with current eMASS status, =95% of identified control gaps with documented recommended actions within 5 business days).
- Provide RMF and IA guidance to JWICS system administrators, Tier 1 support staff, and other technical personnel to ensure security controls and risk considerations are integrated into day-to-day operations and change management.
- Support cyber exercises, inspections, and assessments (e.g., CCRIs, functional exercises, inspections by higher headquarters) by preparing RMF artifacts, responding to findings, coordinating technical responses, and tracking corrective actions to closure.
COMSEC & Cyber Program Oversight - Direct the development and optimization of the HQ AMC COMSEC program, ensuring that workflows, processes, and reporting comply with AR 380-40, TB 380-41, AR 380-53 and effectively manage COMSEC devices within JWICS systems throughout their lifecycle (inventory, keying, maintenance, upgrades).
- Oversee production of COMSEC and cyber governance reports and metrics that demonstrate encapsulation/encryption device compliance and overall JWICS cyber program health.
|