> Markdown version of [/jobs/ext/1422258-information-systems-security-manager](https://www.wearedevelopers.com/jobs/ext/1422258-information-systems-security-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Systems Security Manager - **Company:** Inc. (spa) - **Location:** Washington, DC, United States - **Experience:** Experienced - **Salary:** $160,000.0 - **Contract:** Contract - **Skills:** Configuration Management, Cyber Security, Identity and Access Management, SAP (Applications), Information Technology - **Published:** July 24, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9051602/information-systems-security-manager ## About the Role * Reports to Joint Base Anacostia-Bolling, up to full-time, based upon the needs of the client * Master's Degree in Cybersecurity, Information Technology, Engineering, or related field (or equivalent experience) * 7+ years cybersecurity experience in DoD classified environments. (SAP/SCI) and 3+ years experience as ISSM or equivalent senior cybersecurity lead * Deep familiarity with: JSIG, RMF (DoDI 8510.01), ICD 503, NIST 800-53 and DoD 8570/8140 IAT Level III or IAM Level II/III certification * Strong written and verbal communication skills with experience preparing presentation materials for leadership audiences * Experience working directly with Authorizing Officials and SCAs and Experience in multi-system portfolio management * Active TS/SCI and the ability to maintain it throughout employment ## Description The Systems Security Manager position is responsible for leading Risk Management Framework (RMF) lifecycle activities from initial system categorization through achieving an Authority to Operate (ATO). The selected candidate will develop and maintain comprehensive authorization packages and coordinate closely with Security Control Assessor (SCA) and Authorizing Official (AO) representatives to adjudicate findings and manage risk. Additional responsibilities include preparing systems for ATO, Interim Authorization to Test (IATT), and continuous authorization; ensuring the implementation and validation of security controls in accordance with the Joint Special Access Program Implementation Guide (JSIG) and National Institute of Standards and Technology (NIST) Special Publication 800-53. The Systems Security Manager will track and remediate Plans of Action and Milestones (POA&Ms), conduct internal compliance assessments and inspection preparation, assess technical risk and provide written recommendations to Government cybersecurity leadership, and ensure configuration management and baseline integrity. The role also includes delivering cybersecurity briefings to senior leadership and maintaining effective relationships with external stakeholders to support secure and mission-ready system operations. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post) - [Independently together: how micro-applications improve developer experience + app performance](https://www.wearedevelopers.com/videos/452-independently-together-how-micro-applications-improve-developer-experience-app-performance) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [It's not easy being green](https://www.wearedevelopers.com/videos/558-it-s-not-easy-being-green) ## Related Articles - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)