Information Systems Security Manager

About This Role

This leadership role involves continuous, disciplined oversight of Department of War (DoW) information systems to ensure they remain authorized to operate and are defensible against evolving threats. As a Senior Information System Security Manager (ISSM), you will be the principal cybersecurity authority for one or more system authorization packages throughout their full lifecycle.

Responsibilities

• Manage the RMF process end-to-end, including categorizing systems, selecting and tailoring controls, overseeing assessment and authorization activities, and maintaining continuous monitoring posture after ATO
• Supervise a team of ISSOs, assigning control families, reviewing their work, and consolidating it into authoritative packages in eMASS
• Coordinate directly with Authorizing Officials (AO), Authorizing Official Designated Representatives (AODR), Security Control Assessors (SCA), and program leadership to resolve findings, manage POA&Ms, and drive packages to authorization on schedule
• Combine technical depth in NIST SP 800-53, 800-37, and 800-137 with the leadership to run a compliance program
• Set standards for documentation and artifact management
• Train and mentor ISSOs
• Represent the security posture of your systems to senior stakeholders

Requirements

• 6+ years of experience in cybersecurity compliance, information assurance, or IT security operations
• Experience serving as an ISSM, ISSO, or RMF authorization role on DoD or DoW systems
• Experience managing RMF Steps 1-6: Categorize through Authorize, and Step 7: Continuous Monitoring
• Experience with eMASS, including authorization package development, control implementation statements, POA&M management, and artifact and evidence management
• Experience supervising or mentoring ISSOs or junior compliance staff
• Experience preparing systems for and supporting compliance audits, inspections, or assessments
• Ability to communicate security risk and compliance status clearly to senior leaders, AOs, and SCAs
• TS/SCI clearance
• Bachelor's degree
• DoD 8570 or 8140 IAM Level III certification

Nice to have:

• Experience with defense or national security issues in a specific theater or combatant command environment
• Experience working at a DoD or DoW Command-level Headquarters
• Experience with CNSSI 1253, NIST SP 800-53B, and DoD-specific overlays
• Experience developing internal SOPs, naming conventions, or governance frameworks for artifact and control management
• Experience with system boundary changes, categorization changes, or reauthorization packages
• Experience hiring, interviewing, or building out a compliance team