> Markdown version of [/jobs/ext/1836774-information-systems-security-manager-ii](https://www.wearedevelopers.com/jobs/ext/1836774-information-systems-security-manager-ii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Systems Security Manager II

- **Company:** Scientific Systems Company, Inc.
- **Location:** Burlington, MA, United States
- **Experience:** Experienced
- **Salary:** $143,500.0 - $172,000.0
- **Contract:** Permanent contract
- **Skills:** Computer-Aided Audit Tools, Configuration Management, Cyber Security, SAP (Applications), Software Vulnerability Management, Patch Management, Vulnerability Analysis
- **Published:** July 28, 2026
- **Apply:** https://www.juju.com/job/00000000gk35yo

## About the Role

+ Active Top Secret / SCI clearance with SAP eligibility.

 + Bachelor's degree with 5+ years of relevant cybersecurity experience, or equivalent.

 + 3+ years of experience in classified cybersecurity compliance.

 + Strong experience working with RMF, JSIG, ICD 503, and STIG requirements.

 + Experience with eMASS, audit tools, and vulnerability management solutions.

 + DoD 8570 baseline certification (e.g., CISSP, CISM, or equivalent).

Preferred Qualifications

 + Experience supporting SAP/SAR environments.

 + Prior interaction with DCSA or IC/DoD customer security offices.

 + Knowledge of facility security requirements (SCIF/SAPF).

 + Excellent problem-solving, analytical, and interpersonal skills.

## Description

The ISSM independently manages cybersecurity compliance and operations for assigned classified systems, ensuring alignment with DoD and IC policies. This role is hands-on with RMF, system accreditation, and ongoing monitoring activities while serving as a technical advisor to program teams.

Essential Functions:

 + Develop and maintain SSPs, POA&Ms, and risk assessments for assigned systems.

 + Lead system accreditation efforts in eMASS and ensure compliance with JSIG, ICD 503, NIST SP 800-53, and customer-specific requirements.

 + Conduct vulnerability scanning, patch management, and remediation tracking.

 + Oversee incident response activities and report to AO/DAO as required.

 + Coordinate and lead internal self-inspections and external customer assessments.

 + Implement configuration management policies and ensure baseline compliance.

 + Provide security training and guidance to system users and IT staff.

 + Serve as primary interface with program teams and system owners on cybersecurity issues.

 + This role will include some travel (Approx 15% - 1 Day trips)


## Related Videos

- [Less Is More: How Lagom and Agile Can Create Harmonious Workflows](https://www.wearedevelopers.com/videos/1993-less-is-more-how-lagom-and-agile-can-create-harmonious-workflows)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Independently together: how micro-applications improve developer experience + app performance](https://www.wearedevelopers.com/videos/452-independently-together-how-micro-applications-improve-developer-experience-app-performance)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Best Companies to Work For in Germany: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/33-best-companies-to-work-for-in-germany-top-25-companies-in-2023)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Best Companies to Work For in Berlin: Top 14 Companies in 2023 ](https://www.wearedevelopers.com/magazine/188-best-companies-to-work-for-in-berlin-top-14-companies-in-2023)