> Markdown version of [/jobs/ext/3289049-information-systems-security-manager-issm](https://www.wearedevelopers.com/jobs/ext/3289049-information-systems-security-manager-issm). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Systems Security Manager (ISSM)

- **Company:** LMI
- **Location:** Mechanicsburg, PA, United States
- **Experience:** Expert
- **Salary:** $115,000.0 - $175,000.0
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, CompTIA Security+, Cyber Security, Identity and Access Management, Open Web Application Security, Software Security, SC Clearance, Information Technology
- **Published:** September 1, 2026
- **Apply:** https://www.clearancejobs.com/jobs/8843385/information-systems-security-manager-issm

## About the Role

* 5+ years of experience in DoW cybersecurity roles.
 * Bachelor's degree in engineering, computer science, information technology, or related field.
 * Proven ability to manage the RMF lifecycle for complex technology implementations.
 * Experience supporting contracts with DoD or other federal agencies.
 * Must meet DoDD 8140 IAM Level III requirements (which can be met with the following cybersecurity certifications: CISSP, CISM, GSLC)
 * Must have familiarity and working experience in the Navy RMF process.
 * In-depth knowledge Navy risk tolerance approach, network/system administration, operating system hardening, and security integration practices.
 * Detailed understanding of data protection standards, including Personally Identifiable Information (PII) security.
 * Ability to implement and validate compliance measures for security policies and legal requirements.
 * Effective communication with senior leadership and articulation of cybersecurity risks and solutions.
 * Proficiency in integrating security into the acquisition lifecycle.
 * Knowledge of penetration testing principles and application security risks (e.g., OWASP Top 10).
 * Understanding of system design standards and secure lifecycle management principles.
 * Active Secret clearance required.

## Description

* Manage the cybersecurity risk management process for NADACS, ensuring alignment with FISMA, RMF, and applicable policies/guidelines.
 * Continuously validate the organization's adherence to policies/guidelines/procedures/regulations/laws to ensure compliance.
 * Conduct and oversee technical reviews of system implementation plans to ensure integration of security objectives.
 * Identify and implement IT security program implications of new technologies or upgrades within NADACS.
 * Coordinate cybersecurity inspections, tests, and reviews on the network environment.
 * Oversee the information security training and awareness program for NADACS, ensuring that relevant content is developed and implemented effectively.
 * Participate in and oversee risk assessments during the Security Assessment and Authorization processes.
 * Support incident response programs and ensure security measures are sufficient to address organizational risk tolerance.
 * Ensure cybersecurity policies, guidelines, and procedures are developed, implemented, and aligned with organizational goals.
 * Continuously validate organizational compliance with policies, regulatory requirements, and standards.
 * Recommend improvements for maintaining compliance with laws and relevant cybersecurity governance.
 * Advise senior management on risk levels and security posture and provide recommendations for risk reduction.
 * Advocate for and advise on resources to support information security training and awareness programs.
 * Communicate IT security risks and their implications to stakeholders at all organizational levels.