Information System Security Manager (ISSM)

Information System Security Manager

The Information System Security Manager (ISSM) is responsible for overseeing the cybersecurity posture of systems and ensuring compliance with the Risk Management Framework (RMF). This role frequently collaborates with the Government Information System Security Officer (ISSO) to develop, maintain, and submit RMF artifacts and documentation. The ISSM will apply cyber hardening practices and lead continuous monitoring activities to ensure the system obtains and maintains an Authority to Operate (ATO).

Responsibilities

• Serve as the primary cybersecurity lead, ensuring system accreditation and ongoing ATO sustainment.
• Develop, update, and maintain RMF documentation (including SSPs, POA&Ms, SARs, and other artifacts).
• Perform security assessments, risk analysis, and vulnerability mitigation activities.
• Implement cyber hardening requirements and continuously assess security controls for effectiveness.
• Coordinate with internal and external stakeholders, including the Government ISSO, system owners, engineering teams, and auditors.
• Oversee incident response activities and ensure compliance with organizational and DoD/IC cybersecurity policies.
• Track and report cybersecurity posture and compliance status to leadership.

Qualifications

• 7-10 years of experience in cybersecurity, information assurance, or risk management, or equivalent years of experience.
• Must be a US Citizen - Able to obtain a Public Trust.
• Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field or relevant years of experience.
• Experience supporting RMF compliance efforts within DoD, Federal, or Intelligence Community environments.
• Knowledge of NIST SP 800-37 and NIST SP 800-53 security controls.
• Strong analytical, communication, and briefing skills.
• Experience with continuous monitoring programs in secure environments.

Desired Certifications:

• IAM Level III Preferred.
• CISSP (Certified Information Systems Security Professional).
• CISM (Certified Information Security Manager).
• GSLC (GIAC Security Leadership Certification).
• CCSP (Certified Cloud Security Professional).