Information System Security Manager

We are seeking an experienced Information System Security Manager (ISSM) to lead cybersecurity oversight for assigned systems, programs, or enclaves. The ISSM is responsible for directing Risk Management Framework (RMF) execution, supporting authorization activities, managing vulnerability and risk posture, enforcing security policy implementation, and overseeing the performance of ISSOs and related security support personnel. This role serves as the primary security lead interfacing with leadership, system owners, assessors, engineers, and Authorizing Officials to confirm systems remain secure, compliant, and operationally ready., * Lead and oversee RMF execution across assigned systems, programs, or enclaves *Direct Authority to Operate (ATO) activities and ensure required documentation is complete, current, and audit-ready

• Manage, coach, and mentor ISSOs and other security support staff
• Oversee vulnerability management, risk assessments, POA&M tracking, and remediation prioritization *Develop, implement, and enforce security policies, procedures, and training requirements
• Coordinate with Authorizing Officials, system owners, CISO staff, engineers, and program leadership to assess and communicate system risk posture
• Ensure compliance with security frameworks and federal requirements, (e.g., NIST RMF, NIST SP 800-53, related DoD cybersecurity guidance)

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field preferred *5+ years of cybersecurity or information assurance experience
• Prior team leadership or security oversight experience preferred.
• Active Secret clearance *Relevant DoD 8140 certifications such as CISSP strongly preferred
• Strong knowledge of NIST SP 800-53, RMF processes, and ATO lifecycle activities
• Experience leading security governance, compliance, and risk management efforts
• Experience supervising ISSOs or coordinating security activities across multiple technical teams
• Strong communication skills for executive updates, audit support, and risk briefings
• Familiarity with vulnerability scanning tools, STIG validation, POA&M governance, and security documentation workflows, * Ability to operate in fast-paced, compliance-driven environments
• Strong judgment in evaluating cyber risk and balancing mission needs
• Proven ability to build trust with technical teams and senior leadership
• Detail-oriented approach to documentation, authorization, and continuous monitoring requirements