Information System Security Manager ( ISSM )

Information System Security Manager (ISSM)

We are seeking an experienced Information System Security Manager (ISSM) to lead cybersecurity oversight for assigned systems, programs, or enclaves. The ISSM is responsible for directing Risk Management Framework (RMF) execution, supporting authorization activities, managing vulnerability and risk posture, enforcing security policy implementation, and overseeing the performance of ISSOs and related security support personnel. This role serves as the primary security lead interfacing with leadership, system owners, assessors, engineers, and Authorizing Officials to confirm systems remain secure, compliant, and operationally ready.

Location: Onsite 3-5 days a week

Key Responsibilities

• Lead and oversee RMF execution across assigned systems, programs, or enclaves •Direct Authority to Operate (ATO) activities and ensure required documentation is complete, current, and audit-ready
• Manage, coach, and mentor ISSOs and other security support staff
• Oversee vulnerability management, risk assessments, POA&M tracking, and remediation prioritization •Develop, implement, and enforce security policies, procedures, and training requirements
• Coordinate with Authorizing Officials, system owners, CISO staff, engineers, and program leadership to assess and communicate system risk posture
• Ensure compliance with security frameworks and federal requirements, (e.g., NIST RMF, NIST SP 800-53, related DoD cybersecurity guidance)