> Markdown version of [/jobs/ext/1330864-information-systems-security-manager-issm](https://www.wearedevelopers.com/jobs/ext/1330864-information-systems-security-manager-issm). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Systems Security Manager (ISSM) - **Company:** LMI - **Location:** Mechanicsburg, PA, United States - **Experience:** Expert - **Salary:** $115,000.0 - $175,000.0 - **Contract:** Permanent contract - **Skills:** Software System Penetration Testing, CompTIA Security+, Cyber Security, Identity and Access Management, Open Web Application Security, Software Security, SC Clearance, Information Technology - **Published:** July 18, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=f7bc17611d593164 ## About the Role * 5+ years of experience in DoW cybersecurity roles. * Bachelor's degree in engineering, computer science, information technology, or related field. * Proven ability to manage the RMF lifecycle for complex technology implementations. * Experience supporting contracts with DoD or other federal agencies. * Must meet DoDD 8140 IAM Level III requirements (which can be met with the following cybersecurity certifications: CISSP, CISM, GSLC) * Must have familiarity and working experience in the Navy RMF process. * In-depth knowledge Navy risk tolerance approach, network/system administration, operating system hardening, and security integration practices. * Detailed understanding of data protection standards, including Personally Identifiable Information (PII) security. * Ability to implement and validate compliance measures for security policies and legal requirements. * Effective communication with senior leadership and articulation of cybersecurity risks and solutions. * Proficiency in integrating security into the acquisition lifecycle. * Knowledge of penetration testing principles and application security risks (e.g., OWASP Top 10). * Understanding of system design standards and secure lifecycle management principles. * Active Secret clearance required. ## Description * Manage the cybersecurity risk management process for NADACS, ensuring alignment with FISMA, RMF, and applicable policies/guidelines. * Continuously validate the organization's adherence to policies/guidelines/procedures/regulations/laws to ensure compliance. * Conduct and oversee technical reviews of system implementation plans to ensure integration of security objectives. * Identify and implement IT security program implications of new technologies or upgrades within NADACS. * Coordinate cybersecurity inspections, tests, and reviews on the network environment. * Oversee the information security training and awareness program for NADACS, ensuring that relevant content is developed and implemented effectively. * Participate in and oversee risk assessments during the Security Assessment and Authorization processes. * Support incident response programs and ensure security measures are sufficient to address organizational risk tolerance. * Ensure cybersecurity policies, guidelines, and procedures are developed, implemented, and aligned with organizational goals. * Continuously validate organizational compliance with policies, regulatory requirements, and standards. * Recommend improvements for maintaining compliance with laws and relevant cybersecurity governance. * Advise senior management on risk levels and security posture and provide recommendations for risk reduction. * Advocate for and advise on resources to support information security training and awareness programs. * Communicate IT security risks and their implications to stakeholders at all organizational levels. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Less Is More: How Lagom and Agile Can Create Harmonious Workflows](https://www.wearedevelopers.com/videos/1993-less-is-more-how-lagom-and-agile-can-create-harmonious-workflows) - [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [11 Best Practices For PHP Security](https://www.wearedevelopers.com/magazine/90-11-best-practices-for-php-security)