ISSM/Cybersecurity Analyst (Orlando, FL, Onsite)

Innovative Technologies Corporation (ITC) is seeking an experienced Cybersecurity Analyst to serve as an Information System Security Manager (ISSM) supporting the Defense Health Agency (DHA) Medical Simulation and Training Program Management Office (MST PMO) in Orlando, Florida.

The ISSM will support DoD Risk Management Framework (RMF), Assessment and Authorization (A&A), eMASS, vulnerability management, security-control validation, and continuous-monitoring activities across the MST PMO system portfolio.

This is an onsite position. Situational telework may be authorized by the Government but is not a regular component of the position.

Minimum Qualifications

• Bachelor’s degree.

• Seven or more years of relevant cybersecurity, information-assurance, information-systems security, or RMF/A&A experience.

• Current DoD-approved IAT Level II or higher certification.

• Experience serving as an ISSM within a DoD program office or acquisition environment.

• Demonstrated experience with DoD RMF and system authorization or reauthorization.

• Hands-on experience managing cybersecurity packages in eMASS.

• Experience preparing and maintaining RMF artifacts, including System Security Plans, security-control evidence, risk assessments, and POA&Ms.

• Experience supporting ATO or IATT packages and coordinating with Authorizing Official organizations.

• Experience with vulnerability assessment, STIG compliance, ACAS or Nessus, and remediation tracking.

• Ability to work onsite in Orlando and satisfy applicable DHA security, CAC, facility-access, and system-access requirements.

Preferred Qualifications

• Previous DHA or Army cybersecurity experience.

• Experience with NIST SP 800-53, IAVM/IAVA processes, SCAP, and continuous monitoring.

• Current or recent DHA/DoD credentials, CAC, network access, or eMASS access.

Key Responsibilities

• Perform ISSM responsibilities for assigned DHA MST PMO systems.

• Develop, maintain, and coordinate RMF authorization and reauthorization packages.

• Manage security controls, evidence, assessments, POA&Ms, and approval workflows in eMASS.

• Coordinate with system owners, ISSOs, System Administrators, engineers, Security Control Assessors, and Authorizing Official organizations.

• Conduct or coordinate security-control assessments, vulnerability scans, STIG reviews, and remediation tracking.

• Support IAVM/IAVA compliance and continuous monitoring.

• Evaluate the cybersecurity impact of system and configuration changes.

• Document findings and provide recommendations supporting IATT and ATO decisions.

• Maintain accurate, complete, and audit-ready cybersecurity documentation.

• Report cybersecurity risks, compliance gaps, and matters requiring Government action.

Compensation

The anticipated salary range is $60,000–$68,000 annually. The final salary will depend on directly relevant DoD ISSM and RMF experience, certifications, and qualifications and includes medical/dental/vision benefits, 10 days PTO and 7 days sick time; other benefits are available. Published 9/3/2026.

Pay: $60,000.00 - $68,000.00 per year

Benefits:

• 401(k)

• 401(k) matching

• Dental insurance

• Employee assistance program

• Employee discount

• Flexible spending account

• Health insurance

• Health savings account

• Life insurance

• Paid time off

• Professional development assistance

• Referral program

• Tuition reimbursement

• Vision insurance

People with a criminal record are encouraged to apply

Education:

• Bachelor's (Required)

Experience:

• DoD Cybersecurity, some as an ISSM: 7 years (Required)

Language:

• English (Required)

License/Certification:

• IAT Level II (Required)

Security clearance:

• Secret (Preferred)

Ability to Commute:

• Orlando, FL 32826 (Required)

Work Location: In person