> Markdown version of [/jobs/ext/2228106-information-systems-security-manager](https://www.wearedevelopers.com/jobs/ext/2228106-information-systems-security-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Systems Security Manager

- **Company:** General Dynamics Information Technology
- **Location:** McLean, VA, United States (Remote available)
- **Experience:** Experienced
- **Salary:** $123,250.0 - $166,750.0
- **Contract:** Permanent contract
- **Skills:** Xacta, Amazon Web Services, Configuration Management, Cyber Security, Information Systems, Computer Engineering, System Configuration, Firmware, Information Systems Security Architecture Professional, Security Content Automation Protocol, Information Technology
- **Published:** August 25, 2026
- **Apply:** https://www.dice.com/job-detail/aae44084-0011-4c4b-b763-394b64788b2d

## About the Role

RMF, Security Technical Implementation Guides (STIGs), Xacta (Platform), 4 + years of related experience, * Education: Bachelors (Computer engineering, Computer Science, Electrical Engineering, Information systems, Information Technology, Cybersecurity, or a closely related discipline)

 * Required Experience: 4+ yrs
 * Required Technical Skills:
 * Demonstrated experience with RMF, ICD 503, CNSSI 1253, NIST SP 800-53/53A, and STIGs
 * Experience with XACTA 360, Continuum and other SCAP Compliant tools
 * Require strong documentation skills to create and update policies, process documentation and procedures
 * Security Clearance Level: TS/SCI with active polygraph
 * Desired Certifications:
 * Certified Ethical Hacker 10 (CEH)
 * Certified Information Systems Security Professional (CISSP)
 * Certified Information Systems auditor (CISA)
 * NIST Cybersecurity Framework (NCSF)
 * AWS Solutions Architect Associate or Professional
 * Location: McLean, VA - On Customer Site

## Description

* Support customer RMF workflow and processes by proposing, coordinating, implementing and enforcing information system security policies, instructions, standards, and methodologies
 * Review and approve customer requests related to accesses, devices, and other authorizations
 * Maintain current system information in XACTA to support organizational requirements and processes Evaluate the impact of network and system changes using RMF processes and approve the changes
 * Manage multiple projects throughout Authorization and Accreditation (A&A) process from concept to Authority to Operate (ATO)
 * Coordinate with system stakeholders on mitigating system vulnerabilities outlined in POA&Ms
 * Submit recommendations to stakeholders for system configuration deviations from the required baseline
 * Conduct periodic reviews to ensure compliance with SSP
 * Ensure configuration management for security-relevant IS software, hardware and firmware is maintained and documented
 * Ensure system recovery processes are monitored to ensure security features and procedures are properly restored
 * Ensure all IS security-related documentation is current and accessible to properly authorized individuals
 * Formally notify the appropriate individuals when changes occur that might affect authorization
 * Participate in governance and project reviews identified by the customer


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Playing Pong on a shoulder press machine](https://www.wearedevelopers.com/videos/100140-playing-pong-on-a-shoulder-press-machine)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)