> Markdown version of [/jobs/ext/2937424-information-system-security-manager-l4](https://www.wearedevelopers.com/jobs/ext/2937424-information-system-security-manager-l4). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information System Security Manager - L4 - **Company:** Prism, Inc. - **Location:** Lorton, VA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Azure, Configuration Management, Cyber Security, Information Systems, Information Security Management, Intrusion Detection Systems, Prism (Software), Security Information and Event Management, Firewalls (Computer Science), SAPBasis, Information Technology - **Published:** September 16, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9166553/information-system-security-manager-l4 ## About the Role 5-7+ years of experience in information security management. 5+ years of experience in SCI/SAP environments. Bachelor's degree in Computer Science, Information Technology, or a related field. Strong knowledge of security standards and regulations (NIST, ISO 27001, HIPAA). Experience with security tools and technologies such as firewalls, IDS/IPS, and SIEM. Excellent communication and leadership skills. Must be within driving distance of Lorton, VA, or willing to relocate (Relocation Assistance Package Available). Must be willing to work onsite 5 days per week (may include some travel). Active TS/SCI Clearance Strong written and verbal communication skills with excellent attention to detail. Ability to work independently and collaboratively in a mission-focused environment., AZ-500 (Azure Security Engineer Associate), SC-100 (Cybersecurity Architect Expert), or AZ-305 (Azure Solutions Architect Expert), or similar certification. 5+ years of leadership experience in a relevant business area. Technical certifications in Azure. ## Description PRISM is seeking an Information System Security Manager (ISSM) in Lorton, VA to lead cybersecurity oversight, compliance, and risk management for classified DoD programs. In this role, you will manage system security policies, direct ISSO teams, oversee Risk Management Framework (RMF) lifecycles, and maintain the operational security posture of classified systems in close partnership with Authorizing Officials and program leadership., Develop and maintain a formal IS security program and policies for operational environments. Develop and oversee operational information systems security implementation policy and guidelines. Coordinate with the PSO or cognizant security official on approval of external information systems. Ensure ISSOs under their purview are appointed in writing and follow established IS policies and procedures; assume ISSO responsibilities in their absence when needed. Ensure System Administrators monitor resources for system vulnerabilities or ongoing attacks, and that periodic security testing is conducted. Ensure approved procedures are used for sanitizing and releasing system components and media. Maintain a repository of cybersecurity-related documentation, including ATOs, for all systems under their purview. Coordinate IS security inspections, tests, and reviews, and ensure proper response when an incident or vulnerability is discovered. Ensure configuration management (CM) policies are followed for any hardware/software changes, coordinating with the AO prior to implementation. Serve as a voting member of the Configuration Control Board (CCB) and/or Risk Executive Board, with authority to flag proposed changes deemed a security risk. Manage, maintain, and execute the information security continuous monitoring plan. Maintain working relationships with the ISO, AO, SCA, and other ISSMs, and provide guidance to the broader cybersecurity team. ## Related Videos - [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [How to Stop Your Agents From Going Rogue - Arnav Gupta](https://www.wearedevelopers.com/videos/2152-how-to-stop-your-agents-from-going-rogue-arnav-gupta) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)