> Markdown version of [/jobs/ext/1236992-information-security-manager](https://www.wearedevelopers.com/jobs/ext/1236992-information-security-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Manager

- **Company:** Apogee, Inc.
- **Location:** Colorado Springs, CO, United States
- **Experience:** Expert
- **Salary:** $115,000.0 - $135,000.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Local Security Policy
- **Published:** July 11, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=dd4909763b95b736

## About the Role

Citizenship: Must be a US citizen
Clearance: Must have and be able to maintain a Top Secret (TS) with Sensitive Compartmented Information (SCI) adjudication
Education: Bachelors Degree
Years of Experience: 6+ years experience in information security/program security supporting DoD, IC, or federal environments.
Additional Experience:

 * Working knowledge of DoD/Army security policies and procedures for safeguarding classified information (e.g., marking, handling, storage, transmission, accountability, and destruction).
 * Experience managing security documentation and supporting audits/self-inspections and corrective action tracking.
 * Demonstrated ability to coordinate with Government security stakeholders and support a cleared workforce.
 * Strong written and verbal communication skills; ability to draft SOPs, brief personnel, and maintain accurate records.

Preferred Qualifications:
Additional Experience:

 * Prior experience supporting SMDC or an Army/Joint headquarters environment.
 * Familiarity with security disciplines beyond INFOSEC (e.g., personnel, physical, industrial, or COMSEC) and how they integrate in a program environment.
 * Experience leading security training programs and conducting internal assessments/inspections.
 * Relevant certifications/training (as applicable), such as Security+, CISSP, or DoD security/OPSEC coursework.
 * Experience supporting accreditation/authorization activities or coordinating with cybersecurity teams (as applicable to the program).

## Description

* Manage and administer the program's Information Security (INFOSEC) program, ensuring compliance with DoD/Army policies and local security directives.
 * Maintain security documentation (e.g., SOPs, security plans, visit requests, access rosters, courier documentation, destruction records, briefing/debriefing logs).
 * Oversee classified material handling, storage, transmission, inventory, and accountability; conduct periodic self-inspections and audits.
 * Coordinate personnel security actions as required (e.g., access eligibility verification, indoctrinations, debriefings, clearance visit certifications) in coordination with the Government.
 * Develop and deliver security training/awareness briefings; enforce reporting requirements and incident response procedures.
 * Manage and report security incidents/spillage responses; coordinate mitigation actions and corrective measures.
 * Support facility and program security readiness (e.g., inspections, compliance checks, corrective action plans) and interface with Government security offices.
 * Advise program leadership on risk, compliance status, and security best practices; recommend process improvements.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Policy as [versioned] code - you're doing it wrong](https://www.wearedevelopers.com/videos/532-policy-as-versioned-code-you-re-doing-it-wrong)
- [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [30 powerful AWS hacks in just 30 minutes: Boost your developer productivity](https://www.wearedevelopers.com/videos/1624-30-powerful-aws-hacks-in-just-30-minutes-boost-your-developer-productivity)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 216: CyberSec + Mythos, Stack Overflow for Agents & DOOM in TTF](https://www.wearedevelopers.com/magazine/728-dev-digest-216-cybersec-mythos-stack-overflow-for-agents-doom-in-ttf)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 210: AI Agents Are Go! Is MCP Dead? LLMs Crack Anonymity](https://www.wearedevelopers.com/magazine/709-dev-digest-210-ai-agents-are-go-is-mcp-dead-llms-crack-anonymity)