Information Systems Security Manager

The Information Systems Security Manager will serve as a senior cybersecurity subject matter expert responsible for leading security authorization, governance, risk, compliance, and continuous monitoring activities across assigned systems., * Serve as the senior onsite ISSM and cybersecurity subject matter expert supporting authorization, risk management, and compliance activities across multiple federal systems.

• Lead all phases of the Risk Management Framework (RMF) lifecycle, including system categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
• Analyze and define system security requirements, including requirements associated with multilevel security (MLS), information protection, system architecture, and mission needs.
• Design, develop, engineer, and recommend cybersecurity solutions that address system security, MLS, risk, compliance, and mission requirements.
• Serve as a primary subject matter expert for eMASS, ensuring accurate management of authorization packages, security controls, inheritance relationships, POA&Ms, assessments, and supporting artifacts.
• Support configuration, optimization, and automation of governance, risk, and compliance processes and technologies.
• Maintain cybersecurity accreditation and authorization documentation throughout the system development lifecycle.

• Bachelor’s degree in Cybersecurity, Information Assurance, Information Systems, Computer Science, or a related discipline with 710 years of relevant cybersecurity experience, including at least seven years supporting federal systems.
• Minimum of seven years of experience executing RMF and Assessment & Authorization (A&A) activities within DoW, DoS, DoD, or comparable federal environments.
• Demonstrated experience serving as an ISSM, senior ISSO, ISSE, Security Control Assessor, Validator, or equivalent senior cybersecurity professional with extensive knowledge of NIST security controls, eMASS, POA&Ms, ACAS, and DISA STIG requirements.
• Demonstrated ability to lead cybersecurity compliance efforts, perform risk assessments, develop authorization documentation, and communicate technical and risk information to government and executive stakeholders.Preferred Qualifications
• CISSP, CISM, CASP+, GSLC, or equivalent senior-level cybersecurity certification., * Master’s degree in Cybersecurity, Information Assurance, Information Systems, or a related discipline.
• Extensive hands-on experience with eMASS and RegScale or comparable GRC platforms.
• Experience with ServiceNow GRC or similar governance, risk, and compliance technologies.
• Experience integrating GRC platforms with vulnerability management, workflow, ticketing, and reporting systems.
• Experience supporting AWS or other cloud-based federal environments.
• Experience with multilevel security (MLS), cross-domain security requirements, and complex federal system architectures.

Clearance

• A minimum of an active Secret security clearance is required.