Information Systems Security Manager

Information System Security Manager (ISSM)Are you looking to take the next steps in your career as an Information System Security Manager (ISSM) — Level 4? Let's chat and see if we are a good match!Virtual Service Operations is searching for an Information System Security Manager (ISSM) to join our dynamic team of experts in Lorton, VA. In this role, you will oversee the security of program information systems, ensuring compliance with industry standards and regulations while developing and implementing security policies and procedures. You'll manage the Risk Management Framework lifecycle, oversee ISSOs under your purview, and serve as a key point of coordination across configuration management, risk assessment, and incident response activities. Candidates should bring strong leadership, deep familiarity with security standards such as NIST and ISO 27001, and a background managing information security in classified DoD environments.Key Responsibilities:Develop and maintain a formal IS security program and policies for the Edge environment.Develop and implement information security policies and procedures, and oversee operational IS security implementation guidelines.Coordinate with the PSO or cognizant security official on approval of external information systems.Ensure ISSOs under your purview are appointed in writing and follow established IS policies and procedures; assume ISSO responsibilities in their absence.Conduct risk assessments and vulnerability testing, and ensure periodic security posture testing is performed using intrusion/attack detection and monitoring tools.Monitor and respond to security incidents and threats.Maintain a repository of all organizational- and system-level cybersecurity documentation, including ATOs.Coordinate IS security inspections, tests, and reviews, and manage security audits and assessments.Ensure configuration management policies are followed for all hardware/software changes, coordinating with the appropriate AO prior to implementation.Serve as a voting member of the Configuration Control Board (CCB) and/or Risk Executive Board, with authority to veto changes deemed detrimental to security.Manage, maintain, and execute the information security continuous monitoring plan.Ensure a record of all security-related vulnerabilities is maintained, and report serious or unresolved violations to the AO/DAO.Develop and deliver security awareness training to employees.Maintain working relationships with the ISO, AO, SCA, and other ISSMs, and provide guidance to cybersecurity teammates.