Information System Security Manager (ISSM)

About This Role

Serve as the primary authority for information system security for enterprise and program-level systems, developing and maintaining security policies and overseeing Authority to Operate (ATO) processes. This role ensures continuous monitoring, risk assessment, and remediation of security vulnerabilities, and manages systems supporting DoD and federal programs.

Responsibilities

• Serve as the primary authority for information system security across enterprise and program-level systems
• Develop, implement, and maintain system security policies, procedures, and standards aligned with NIST SP 800-53, RMF, DoDI 8510.01, and contract requirements
• Oversee Authority to Operate (ATO) processes, including preparation, submission, and maintenance of RMF packages
• Ensure continuous monitoring, risk assessment, and remediation of security vulnerabilities
• Manage systems supporting DoD and federal programs
• Coordinate security activities with IT Administration, Security Contractors, system owners, and program managers
• Lead internal and external security audits, inspections, and assessments
• Ensure compliance with DFARS 252.204-7012, CMMC, and other contractual cybersecurity requirements
• Oversee cybersecurity incident response activities, including investigation, reporting, and corrective actions
• Provide mentorship and guidance to IT administrators and cybersecurity staff

Requirements

• Bachelor’s degree in Information Security, Computer Science, Information Systems, or related field (or equivalent experience)
• 8+ years of experience in information security
• 3-5 years in an ISSM or senior cybersecurity leadership role
• Hands-on experience with RMF, NIST SP 800-53, and DoD accreditation processes
• Strong understanding of Windows systems, networks, and enterprise IT security controls
• Excellent written and verbal communication skills, including experience interfacing with government customers

Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Systems, or related field (or equivalent experience)
• 8+ years of experience in information security, with at least 3–5 years in an ISSM or senior cybersecurity leadership role

Nice to Have

• CISSP, CISM, or similar DoD 8570/8140-compliant certification
• Experience in a prime, defense contractor environment
• Familiarity with CMMC implementation and assessments
• Experience managing cybersecurity for multiple concurrent programs
• Master’s degree in a related discipline

Skills

* Required skills

Certifications