> Markdown version of [/jobs/ext/1299298-information-systems-security-manager-issm](https://www.wearedevelopers.com/jobs/ext/1299298-information-systems-security-manager-issm). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Systems Security Manager (ISSM)

- **Company:** Zachary Piper
- **Location:** Colorado Springs, CO, United States
- **Experience:** Expert
- **Salary:** $120,001.0 - $160,000.0
- **Contract:** Permanent contract
- **Skills:** Xacta, Microsoft Windows, Cyber Security, Information Systems, Disaster Recovery, Information Security Management, SAP (Applications), Security Content Automation Protocol, Virtualization Technology, Nessus, Splunk, Plan of Action and Milestones, Vmware
- **Published:** July 16, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9033438/information-systems-security-manager-issm

## About the Role

* Bachelor's degree (preferably Information Security, Cybersecurity, or related field)
 * 9+ years of experience supporting cybersecurity, information assurance, system administration, or related disciplines (7 years with a Master's degree)
 * Experience with Risk Management Framework (RMF), NIST standards, CNSS requirements, cybersecurity risk management methodologies, and compliance processes
 * Experience supporting Program Security disciplines including OPSEC, Program Protection, Personnel Security, Security Training and Education, and Classification Management
 * Experience working within SAP and/or SCI environments
 * Experience controlling, labeling, scanning, and transferring data between information systems operating at various classification levels
 * Willingness to support nomination for Sensitive Compartmented Information (SCI), Special Access Programs (SAP), and Polygraph requirements
 * Possession of certification(s) meeting or exceeding DoD 8140 IAT Level II requirements (e.g., Security+, CISSP)
 * Experience supporting Windows-based environments with working knowledge of Linux operating systems

 * Master's degree in Cybersecurity, Information Security, or related security discipline
 * Experience using DoD cybersecurity and compliance tools including eMASS, XACTA, ACAS, STIGs, Nessus, SCAP, and Splunk
 * Knowledge of JSIG, ICD 503, NIST RMF, NIST, and Assessment & Authorization (A&A) processes
 * Experience supporting Incident Response and Disaster Recovery activities
 * Experience developing and maintaining security plans, procedures, and certification artifacts
 * Familiarity with virtualized infrastructure technologies such as VMware
 * Experience conducting security audits and formal information system assessments
 * Extensive experience administering and securing Windows-based information systems
 * Understanding of Contractor Program Security Officer (CPSO) responsibilities including PERSEC, PHYSEC, visitor control, facility security, and security education programs
 * Familiarity with DD254 requirements and support of government contracts

## Description

* Lead activities required to obtain and maintain Authority to Operate (ATO) approvals for classified information systems
 * Ensure compliance with Department of Defense (DoD), Risk Management Framework (RMF), CNSSI, NIST, and applicable cybersecurity policies and directives
 * Perform vulnerability and risk assessments supporting authorization and accreditation efforts for classified systems
 * Develop, maintain, and update RMF documentation including System Security Plans (SSP), System Assessment Plans (SAP), Risk Assessment Reports (RAR), Security Control Traceability Matrices (SCTM), Plans of Action and Milestones (POA&M), and Continuous Monitoring (ConMon) Plans
 * Coordinate with program security officers and government security officials regarding approvals for External Information Systems and system interconnections
 * Conduct periodic reviews and evaluations of information system security policies, standards, and procedures
 * Support and coordinate Information System Security Assessments, testing activities, and security reviews
 * Evaluate and process hardware and software requests through appropriate security review processes


## Related Videos

- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)