Information System Security Manager (ISSM)

Information System Security Manager (ISSM) The ISSM leads and manages cybersecurity efforts across enterprise applications and systems, ensuring compliance with risk management frameworks (RMF), secure software development lifecycles, and Intelligence Community (IC) standards. This role includes managing accreditation, conducting risk assessments, vulnerability testing, and collaborating with cross-functional teams to maintain the highest standards of information security. Duties and Responsibilities: • Oversee cybersecurity measures for applications in Agile and DevSecOps environments. • Design and develop secure systems, applications, and enterprise-wide cyber solutions. • Ensure system security needs are addressed across development, operations, testing, certification, and accreditation. • Conduct risk assessments, system hardening, vulnerability scanning, and incident response. • Manage assessment and authorization (A&A) efforts, including reaccreditation. • Track and manage Plan of Action and Milestones (POAMs) and recommend remediation. • Facilitate technical exchange meetings (TEMs) and coordinate with key stakeholders. • Develop security evaluation test plans and drive secure software development lifecycle practices, including containerization security per NIST SP 800-190. • Provide guidance on cloud computing services, deployment architecture, and network security tools. • Integrate new features into existing infrastructures and provide recommendations for security improvements. You MUST have: • An active DoD TS/SCI clearance is required. • 10+ years experience in cybersecurity for intelligence systems. • CISSP certification required. • Expertise in security architecture, RMF compliance, and security engineering. • Deep understanding of compliance frameworks such as NIST or ISO/IEC 27001. • Experience working with or in the Intelligence Community (IC). • Scaled Agile Framework (SAFe) Agilist or Certified Scrum Master (CSM) certification. It's GREAT if you also have: • Experience managing a cybersecurity team consisting of cybersecurity engineers, ISSOs and ISSMs. • Experience with developing, testing, and sustaining a secure solution in dynamic, rapidly evolving multi-cloud and multi-security enclave environments. • Experience managing a team responsible for developing and implementing enterprise security policies and practices. • Experience assessing and planning for compliance with DoD Zero Trust in accordance with the DoD Zero Trust Strategy and DoD Zero Trust Reference Architecture. Education: • Bachelors and 10+ years experience is required. • Masters in a Technical Field preferred.