> Markdown version of [/jobs/ext/2514422-information-system-security-manager-issm](https://www.wearedevelopers.com/jobs/ext/2514422-information-system-security-manager-issm). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information System Security Manager (ISSM) - **Company:** Keaki Technologies - **Location:** Indian Springs, NV, United States - **Experience:** Experienced - **Salary:** $118,327.0 - **Contract:** Permanent contract - **Skills:** Xacta, Configuration Management, Cyber Security, Information Systems, Identity and Access Management, Information Security Management, Package Development Process, Security Content Automation Protocol, Software Vulnerability Management, Information Technology, Nessus, Plan of Action and Milestones, Vulnerability Analysis - **Published:** August 24, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9114614/information-system-security-manager-issm ## About the Role Work Environment, Physical and Mental Demands: Typical office environment with no unusual hazards, occasional lifting of 20 pounds, kneeling, standing, and walking, routinely sitting and constant use of speech/hearing abilities for communication, constant mental alertness, and must be able to work under deadlines, * A BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, Computer Science, or equivalently relative discipline, from an ABET accredited or CAE designated institution. * Active DoD 8140 / DoDI 8570.01-M IAM Level II or III Certification matched to ISSM responsibilities prior to hiring * Must possess and maintain a valid state-issued driver's license., * Minimum three to five (3-5) years of dedicated experience in RMF package development, continuous monitoring, and acting as an ISSM or lead ISSO. * Demonstrated proficiency in navigating and managing ATO packages within both eMASS and Xacta. Experience with STIGs, SCAP, vulnerability scanning, and ACAS/NESSUS. * Knowledge of cybersecurity laws, regulations, policies, governance, and technical safeguards governing the use, processing, storage, and transmission of classified information. * Exceptional communication skills, with the ability to confidently brief senior government leadership (AOs, SCAs, PMs) on cyber risk posture., * Master's degree in a Cybersecurity or related field. * Experience with COMSEC accounts. * Understanding of GSA approved security containers and locks. REQUIRED CITIZENSHIP AND CLEARANCE: * U.S. Citizenship is required. * Active Top Secret Clearance with the ability to obtain and maintain SCI access. ## Description The ISSM provides dedicated strategic cybersecurity leadership and oversight for designated classified information system enclaves supporting the 25th Attack Group (25 ATKW). Unlike a hybrid or tactical operations role, this position focuses exclusively on system-level cybersecurity governance, Risk Management Framework (RMF) compliance, and continuous monitoring to achieve and maintain Authorizations to Operate (ATO). The ISSM serves as the primary cybersecurity technical advisor to the Government Authorizing Official (AO), Program Manager (PM), and Information System Owner (ISO)., * Serve as the formally appointed Information Systems Security Manager (ISSM) for up to four contractor managed Information Systems (including RPA Low, ACN, Audio MLS, and RPA High), overseeing the full lifecycle of cybersecurity compliance and system accreditation in accordance with DoDI 8510.01, AFI 17 101 (RMF), and AFMAN 17-1301 (COMPUSEC). * Develop, maintain, and oversee authorization documentation, System Security Plans (SSPs), risk assessments, and continuous monitoring activities using both eMASS and Xacta workflow platforms. * Act as the primary interface with Government Authorizing Officials (AOs) and Security Control Assessors (SCAs) to present risk assessments, initiate ATO packages, manage Plan of Action and Milestones (POA&Ms), and secure timely renewals. * Maintain rigorous oversight of vulnerability management, incident reporting, access control governance, and configuration management functions across assigned enclaves. * Provide oversight and guidance to subordinate cybersecurity personnel (ISSOs) to ensure security control implementation and mitigation efforts align with established baselines and mission requirements. * Provide contingency continuity support for tactical enclave cybersecurity (ISSO) activities during periods of workforce shortfalls or as critical mission needs dictate. * Report conditions that materially affect system authorization status or cybersecurity posture directly to the Government, translating technical risk into actionable mission risk. * Initiate exceptions, deviations, or waivers to cybersecurity requirements when operational impacts dictate, ensuring complete documentation and coordination with the AO. * Ensure all assigned personnel and systems remain compliant with applicable DoW/DoD 8140 cybersecurity workforce requirements. * Perform all other position related duties, as assigned, or requested. ## Related Videos - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Less Is More: How Lagom and Agile Can Create Harmonious Workflows](https://www.wearedevelopers.com/videos/1993-less-is-more-how-lagom-and-agile-can-create-harmonious-workflows) - [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)