> Markdown version of [/jobs/ext/1133087-information-system-security-manager](https://www.wearedevelopers.com/jobs/ext/1133087-information-system-security-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information System Security Manager

- **Company:** John Galt Staffing, Inc.
- **Location:** Manassas, VA, United States
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Cyber Security, Information Systems, Data Security, Linux, Information Security Management, Network Control, Legacy Systems, Vulnerability Analysis
- **Published:** July 1, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9007723/information-system-security-manager

## About the Role

Must possess or be willing to obtain CISSP and applicable certifications supporting DoD Directive 8570
Experience with or have worked as one or more of the following: Information Systems Security Manager (ISSM), Information System Security Officer (ISSO), Linux administrator (Linux +), Windows administrator (all OS(s) including legacy systems), Systems Administrator, Information System Auditor, Data Security Analyst, Network Control Technician
Experience with ISFO and RMF process
Experience with Linux and Networking
DESIRED SKILLS & REQUIREMENTS:
Industrial Security Program experience
Active DoD Security clearance
Experience with RMF and Compliance for system compliance
CISSP certification
Experience with NIST 800-53 r4
Project Management and Leadership
Excellent written and verbal communication skills
Familiarity with OBMS and EMASS
Experience implementing DISA STIGs
Knowledge of SIPRNet operations at the small enclave level

## Description

The ISSM will adhere to all requirements as stated in the 32 CFR Part 117 NISPOM Rule, National Industrial Security Program Operating Manual (NISPOM, DoD 5220.22-M) and the Defense Counterintelligence and Security Agency (DCSA) Assessment and Authorization Process Manual (DAAPM)
The ISSM shall liaise directly with the assigned DCSA ISSP to ensure full and timely compliance with government directives and regulations
The ISSM shall assist the Facility Security Officer (FSO) in the effective implementation, assessment, and management of the PSC Security Program
The ISSM reports security issues to the FSO and the Insider Threat Program Senior Official (ITPSO) as applicable
Establishes, documents, implements, and monitors the Information System (IS) hardware, software, security program, System Security Plans (SSPs), security education, awareness, and training activities for facility management, IS personnel, users, and others, as appropriate
Coordinates IS security program with the Corporate ISSM and Information System Security Officers (ISSOs) in addition to other facility ISSMs and ISSOs
Prepares and implements security documentation, and monitors the IS Security Program and related procedures to ensures facility compliance with requirements for IS
Identifies and documents unique local threats and vulnerabilities; makes recommendation to risk management status and reports threat indicators into the Insider Threat process
Ensures that periodic self-inspections of the facility's IS security program and accredited systems are conducted as part of the overall facility self-inspection program and that corrective action is taken for all identified findings and vulnerabilities; self-inspections are to ensure that the accredited system is operating as accredited and that accreditation conditions have not changed
Develops and implements Incident Response plans, vulnerability assessments, and maintenance procedures
Designates and manages the training, certification and oversight responsibilities of assigned ISSOs as applicable
Monitors and provides guidance on Information Assurance and IS Security Awareness to employees through scheduled briefings, training and Monthly IS Security Newsletter
Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information.


## Related Videos

- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)