Information System Security Manager (req-294)

Team CATHEXIS elevates the government contracting experience through rapid response, deep skill, and thoughtful problem-solving and communication. Our core capabilities are our top-tier program and project management, data analytics, and audit services, the backbone of which is our integrated approach to operational excellence.

You worked hard to get to where you are. You strive to make every day better than the day before. So do we. Team CATHEXIS operates with an all-in mindset. We are working together to create a company that supports our shared values and individual goals. Our values are centered around leading with integrity, owning the outcome, growing together, and moving with purpose in everything we do for our employees, customers, partners, and communities. We believe success is best when we listen and lead with empathy; model high standards of ethics to provide a rewarding candidate experience; work hard, have fun, and appreciate the strengths we all bring to the team; and empower our employees to create innovative and trusted results.

We are looking for a dynamic Information System Security Manager to join our team! The Information System Security Manager (ISSM) serves as the principal advisor to the Authorizing Official (AO) and program leadership on all matters, technical and otherwise, involving the security of assigned information systems. The ISSM is responsible for the development, implementation, and maintenance of the agency’s information security program in accordance with the Risk Management Framework (RMF), NIST SP 800-series guidance, and applicable federal and agency-specific security policies. This role oversees a team of Information System Security Officers (ISSOs) and serves as the primary point of contact for security authorization, continuous monitoring, and incident response activities. Responsibilities

• Serve as the principal advisor to the Authorizing Official (AO) and Information System Owner on the security of assigned information systems
• Lead and manage the Assessment and Authorization (A&A) process for information systems in accordance with the Risk Management Framework (RMF, NIST SP 800-37), ensuring timely issuance and maintenance of Authorizations to Operate (ATOs)
• Develop, review, and maintain System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), Security Assessment Reports (SARs), and other required RMF artifacts
• Oversee a team of Information System Security Officers (ISSOs), providing guidance on day-to-day security operations and compliance activities
• Conduct and oversee continuous monitoring activities, including vulnerability scanning, configuration management, and security control assessments, to maintain the security posture of authorized systems
• Ensure compliance with FISMA, NIST SP 800-53, NIST SP 800-171 (as applicable), CNSSI, and agency-specific cybersecurity policies and directives
• Coordinate incident response activities and report security incidents to the appropriate agency SOC/CSIRC and leadership in accordance with established procedures
• Manage risk assessments and communicate residual risk to the AO, providing recommendations for risk acceptance, mitigation, or remediation
• Ensure personnel supporting assigned systems meet DoD 8570.01-M / DoD 8140 information assurance workforce certification and training requirements
• Maintain security documentation in agency GRC/eMASS (or equivalent) systems and support periodic audits, Inspector General (IG) reviews, and independent assessments
• Support the development of security policies, procedures, and standard operating procedures (SOPs) to strengthen the agency’s overall security program

• Active Secret clearance or higher
• Minimum 3 years of experience in information systems security, information assurance, or cybersecurity, with direct experience supporting a federal agency
• Demonstrated experience serving as an ISSM, ISSO, or equivalent security role within the Risk Management Framework (RMF) or legacy DIACAP/C&A process
• Working knowledge of NIST SP 800-37, NIST SP 800-53, NIST SP 800-30, and FISMA reporting requirements
• Active DoD Secret security clearance required at time of hire; ability to maintain clearance eligibility for the duration of the contrac
• Current DoD 8570.01-M / DoD 8140 IAM Level II certification (e.g., CAP, CASP+ CE, CISM, GSLC) at time of hire
• Strong written and verbal communication skills, with experience briefing technical risk and compliance matters to government leadership and Authorizing Officials
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent professional experience

Desired Skills

• IAM Level III certification (e.g., CISSP, CISSP-ISSMP, CISM) or equivalent advanced credential
• Experience using eMASS, Xacta, or other GRC platforms to manage A&A documentation
• Experience supporting defense, healthcare, or civilian federal agency security programs
• Familiarity with cloud security authorization processes (FedRAMP) and DevSecOps/continuous ATO practices

CATHEXIS offers competitive compensation packages to all eligible employees. Our goal is to provide a compensation package that reflects the value you bring to our team, is competitive with national average market rates, and promotes your financial security and personal well-being. The annual salary range for this role is $150,000.00 - $195,000.00 Please note that the salary information provided is a general guideline. CATHEXIS considers various factors in its final offer, including location, qualifications, experience, and skills.

• Performance Bonuses
• Medical Insurance
• Dental Insurance
• Vision Insurance
• 401(k) Plan (Traditional and ROTH)
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off
• 11 Federal Holidays
• Parental Leave
• Commuter Benefits
• Short Term & Long Term Disability
• Training & Development
• Wellness Program
• Community Outreach Initiatives