Affinity

4510 ISSM

Affinity • $110K — $130K *
Chantilly, VA 20152In-Person
Information Technology
5 - 7 years of experience
Today
Be an Early Applicant
Job Overview by Ladders

Qualifications

  • Bachelor's degree in information security, Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience).
  • 7+ years of progressive cybersecurity or information assurance experience.
  • Experience as an ISSM, ISSO, IA Manager, or similar role.
  • Working knowledge of NIST SP 800-171, NIST SP 800-53, RMF, DFARS 252.204-7012, CMMC, and DoD cybersecurity requirements.
  • Experience developing SSPs and supporting security audits.

Responsibilities

  • Develop, implement, and improve the corporate Information Security Program as the primary ISSM.
  • Lead cybersecurity compliance activities including NIST, CMMC, and other frameworks.
  • Design and oversee the secure operation of systems ensuring proper security controls are in place.
  • Conduct security assessments, audits, and vulnerability evaluations to maintain compliance.
  • Manage cybersecurity incidents including reporting and documentation of findings.
  • Provide executive-level reporting on cybersecurity posture and risk management.
  • Administer and troubleshoot Windows-based servers and various security technologies.

Benefits

  • Collaborative cross-departmental interactions with leadership and technical teams.
  • Hands-on leadership role shaping the organization's cybersecurity approach.
  • Exposure to diverse cybersecurity frameworks and compliance requirements.
  • Opportunities for ongoing education and security awareness training.
  • Chance to influence cybersecurity strategy at an organizational level.
Full Job Description
4510 ISSM
4510 | Secret

Job Description:

OVERVIEW:

We are seeking a Cybersecurity Systems Engineer/Information Systems Security Manager (ISSM) to provide leadership for the organization's information security, governance, risk, and compliance program. You will be responsible for protecting the confidentiality, integrity, and availability of corporate and customer information systems while aligning cybersecurity practices with business objectives, contractual obligations, and regulatory requirements.

This position serves as the organization's primary cybersecurity advisor and works collaboratively with Information Technology, Program Management, Contracts, Human Resources, and Executive Leadership to maintain compliance with applicable cybersecurity frameworks and contractual obligations. This is a hands-on leadership role that combines information systems security management with responsibility for the secure administration, engineering, configuration, and maintenance of the organization's corporate and classified information technology environments.

GENERAL DUTIES:

  • Develop, implement, and continuously improve the corporate Information Security Program, serving as the primary ISSM and security lead for corporate, customer, classified, air-gapped, and standalone information systems.
  • Lead cybersecurity compliance activities associated with applicable regulations, contracts, and frameworks, including NIST SP 800-171, NIST SP 800-53, CMMC, CMMI, DFARS, FAR, ISO 27001, DCSA, RMF, ATO, and customer-specific requirements.
  • Design, implement, document, and oversee the secure operation and lifecycle management of corporate, cloud, classified, air-gapped, and standalone systems, ensuring appropriate security controls are implemented and maintained.
  • Develop and maintain SSPs, POA&Ms, authorization packages, policies, standards, procedures, system and network diagrams, inventories, configuration records, and documentation supporting account management, media control, auditing, incident response, and continuous monitoring.
  • Lead internal and external security assessments, ISO audits, CMMC readiness activities, reviews, self-inspections, vulnerability assessments, control validation, and remediation of identified findings.
  • Conduct risk assessments, oversee vulnerability management and remediation tracking, monitor emerging threats and regulatory changes, and provide executive-level reporting on cybersecurity posture, compliance, vulnerabilities, and risk.
  • Manage cybersecurity incidents, including reporting, investigation, documentation, corrective action, and coordination with appropriate internal, customer, and government stakeholders.
  • Review system changes from a security perspective and partner with IT personnel to ensure secure configuration management, patching, endpoint protection, identity and access management, backups, system hardening, and lifecycle maintenance.
  • Administer, configure, secure, maintain, and troubleshoot Windows-based servers and workstations, network and security devices, Microsoft 365 Government, Entra ID, Intune, Defender, Purview, privileged access, cloud services, and related technologies.
  • Coordinate with the Facility Security Officer, Insider Threat Program Senior Official, system administrators, executive leadership, auditors, government customers, third-party assessors, vendors, and managed service providers to ensure security responsibilities are assigned and executed.
  • Develop and deliver security awareness and annual cybersecurity training for employees.
  • Support business development activities through proposal responses, security compliance documentation, technology evaluations, and recommendations for security and infrastructure improvements..
  • Strong knowledge of cybersecurity principles, risk management, and security architecture.
  • Strong working knowledge of systems administration, endpoint and identity management, networking, cloud services, system hardening, backup and recovery, and technical troubleshooting, with the ability to translate security and contractual requirements into practical technical controls and system configurations.
  • Ability to independently perform and document technical work while providing sound security guidance to leadership and balancing compliance, operational availability, cost, and business requirements.
  • Ability to interpret government regulations and contractual security requirements.
  • Excellent written, verbal, presentation, and executive communication skills.
  • Strong analytical and problem-solving skills.
  • Excellent organizational and project management abilities.
  • Ability to manage multiple priorities while meeting deadlines.
  • Strong customer service orientation and collaborative leadership style.
  • Ability to influence stakeholders across all levels of the organization.


REQUIRED QUALIFICATIONS:

  • Bachelor's degree in information security, Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent combination of education and experience).
  • 7+ years of progressive cybersecurity or information assurance experience.
  • Experience serving as an ISSM, ISSO, IA Manager, or similar role.
  • Working knowledge of NIST SP 800-171, NIST SP 800-53, RMF, DFARS 252.204-7012, CMMC, and DoD cybersecurity requirements.
  • Experience developing SSPs, POA&Ms, security policies, standards, and procedures.
  • Experience supporting security audits and assessments.
  • Excellent written, verbal, and presentation skills.
  • Ability to effectively communicate cybersecurity concepts to both technical and non-technical audiences.
  • Ability to work at a computer for extended periods.
  • Occasionally lift up to 25 pounds.


DESIRED QUALIFICATIONS:

  • CISSP certification (or ability to obtain within an agreed timeframe).
  • Certifications such as CISM, Security+, CASP+, CCSP, CGRC (formerly CAP), CEH.
  • Experience with Microsoft 365 Government, Microsoft Defender, Microsoft Entra ID (Azure AD), Intune, and Microsoft Purview.
  • Experience with SIEM, EDR, vulnerability scanning, and cloud security platforms.
  • Experience supporting CMMC Level 2 or 3, ISO 27001, and/or ISO 20000 compliance programs.
  • Experience with developing policies and procedures and passing DCSA audits.
  • Experience supporting Defense Industrial Base (DIB) contractors.
  • Experience supporting classified and unclassified information systems.


CLEARANCE:

  • Active Secret clearance minimum required


Job Details

City : Chantilly

State : Virginia

About Affinity

Affinity’s patented technology structures and analyzes millions of data points across emails, calendars, and third-party sources to offer users the tools they need to automatically manage their most valuable relationships, prioritize important connections, and discover untapped opportunities. Affinity uses artificial intelligence to analyze relationship strength and illuminate the best paths to warm introductions. The platform also offers a holistic view of users’ networks in a centralized, automatically updated database without any manual upkeep. Founded in 2014, Affinity is headquartered in San Francisco, California. Affinity has raised $120M to date and is backed by leading investors including Menlo Ventures, Advance Venture Partners, 8VC and MassMutual Ventures. It has over 2,700 customers in 70 countries, including venture capital firms such as Bain Capital Ventures and Kleiner Perkins, private equity firms such as SoftBank Group, investment bankers such as Woodside Capital Partners, financial services firms such as Fidelity Investments, real estate companies such as Tishman Speyer, insurers such as American Family Insurance and enterprises such as Nike, Qualcomm and Twilio. Affinity has been named in Fortune Magazine's Best Workplaces, Inc. Magazine's Best Workplaces and editor's number one pick, the Data Breakthrough Award, BIG Innovation Award and others.
Learn more about Affinity
Size
1,000 employees
Industry
Enterprise Technology
Founded
2014
* Ladders Estimates

Similar Jobs

Ad banner background

Get Ready For Your
Next Interview

More Jobs at Affinity

More Information Technology Jobs

Find similar 4510 ISSM jobs:

NationwideChantilly, VA