> Markdown version of [/jobs/ext/2722678-information-systems-security-manager](https://www.wearedevelopers.com/jobs/ext/2722678-information-systems-security-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Systems Security Manager - **Company:** EPI RECYCLING SOLUTIONS - **Location:** Torrance, CA, United States - **Experience:** Expert - **Salary:** $150,700.0 - $186,700.0 - **Contract:** Contract - **Skills:** Microsoft Windows, Cyber Security, Linux, Identity and Access Management, Security Content Automation Protocol, Software Requirements Analysis, Nessus - **Published:** September 4, 2026 - **Apply:** https://startup.jobs/senior-information-systems-security-manager-issm-epirus-company-8905644 ## About the Role * 5+ years of experience as an Information Systems Security Officer (ISSO) or Information Systems Security Manager (ISSM) * Fully competent in the execution of RMF system requirements * Currently hold a valid IAM Level III certification (CISSP, GSLC, CISM) * Active TS/SCI Clearance * Experience in utilizing security-relevant tools, operating systems (Windows, Linux, etc.), and applications (SCAP, STIG, Nessus) in support of classified programs * Experience developing security policies required to support Interim Authority to Test (IATT), Authorizations to Connect (ATC), and Authorizations to Operate (ATO) efforts * Ability to conduct risk assessments and investigations, execute appropriate risk mitigations, and oversee incident response or vulnerabilities promptly and effectively * This is a hybrid position with 3 days in the office in Torrance, CA Preferred Skills and Experience: * Experience with the Defense Counterintelligence and Security Agency (DCSA) Assessment and Authorization Process Manual (DAAPM) and Risk Management Framework (RMF) security processes ## Description Job Summary: Epirus is seeking an experienced Senior Information Systems Security Manager (ISSM) to maintain the current classified infrastructure and lead Epirus' Information Security team's efforts to obtain Authorizations to Operate (ATO) on future projects. The ISSM will own the classified information system process from start to finish. The ISSM will be required to travel to customer sites or testing facilities as necessary. The ideal candidate is experienced working within the defense industry, has experience bringing multiple systems through the ATO process, and can perform in a fast-moving, startup environment., * Serve as a key cybersecurity stakeholder in projects, security assessments, program proposals, and program direct work * Act as a manager of the existing systems within the current ATO * Perform continuous monitoring of current systems * Build out and maintain compliant, air-gapped systems in support of program and project efforts * Collaborate with the Facility Security Officer (FSO) to develop and implement a robust IS security education, training, and awareness program * Travel up to 25% to test sites and customer locations ## Related Videos - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [SRE Methods In an Agency Environment](https://www.wearedevelopers.com/videos/348-sre-methods-in-an-agency-environment) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)