> Markdown version of [/jobs/ext/3953078-information-systems-security-manager-issm](https://www.wearedevelopers.com/jobs/ext/3953078-information-systems-security-manager-issm). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Systems Security Manager (ISSM)

- **Company:** The Apex
- **Location:** Los Angeles, CA, United States
- **Experience:** Expert
- **Salary:** $168,000.0 - $231,000.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Audit Trail, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Computing Security, Configuration Management, CompTIA Security+, Cyber Security, Information Systems, Hardware Design, Infrastructure as a Service (IaaS), Information Security Management, Information Systems Security Architecture Professional, Network Security, Platform as a Service (PAAS), Systems Development Life Cycle, Security Information and Event Management, Software Vulnerability Management, SARS Software Products, Information Technology, Front End Software Development, National Industrial Security Program Operating Manual (NISPOM), Vulnerability Analysis
- **Published:** October 27, 2026
- **Apply:** https://www.careerbuilder.com/job-details/information-systems-security-manager-issm-los-angeles-ca--68a664ab-9082-4999-8382-40645724572b

## About the Role

Security Monitoring, Computer Security, Systems Administration/Management, Wheel/Front-End Loader, Buses, Cost Control, Manufacturing Design, High Tech Industry, Hardware Design, Computer Security, * Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field; Master's degree preferred.

 * Active TS/SCI security clearance
 * Minimum of 7-10 years of progressive experience in cybersecurity, with at least 3-5 years in an ISSM, senior ISSO, or equivalent leadership role managing information system security in DoD, federal, or classified environments.
 * In-depth knowledge of NIST Risk Management Framework (RMF), NIST SP 800-53 controls, DoD Instruction 8510.01, CNSSI 4009, and related standards.
 * Proven experience leading ATO processes, preparing accreditation packages, and achieving/maintaining system authorizations.
 * Strong understanding of cybersecurity principles, including vulnerability management, incident response, access controls, encryption, network security, and supply chain risk.
 * Experience with tools for vulnerability scanning, SIEM, configuration management, and continuous monitoring.
 * Excellent leadership, communication, and advisory skills to influence stakeholders at all levels.
 * In-depth knowledge of cloud technology such as IaaS, PaaS, and SaaS (e.g. AWS GovCloud, GCP, and Azure)
 * Relevant certifications such as:
 + CISSP (Certified Information Systems Security Professional)
 + CISM (Certified Information Security Manager)
 + CCSP (Certified Cloud Security Professional)
 + CompTIA Security+, CGRC (formerly CAP), or equivalent highly desirable
 * U.S. citizenship is required

## Description

The Information Systems Security Manager (ISSM) is a senior cybersecurity leadership role responsible for overseeing the cybersecurity posture of one or more programs, organizations, systems, or enclaves. This position ensures the confidentiality, integrity, and availability of information systems, particularly in regulated environments such as DoD, federal agencies, or classified programs. The ISSM serves as the principal advisor on information system security matters, manages compliance with frameworks such as the Risk Management Framework (RMF), and leads efforts to obtain and maintain an Authority to Operate (ATO). This role combines strategic risk management, policy development, team leadership, and hands-on oversight of security operations to mitigate threats and vulnerabilities., * Oversee the development, implementation, and maintenance of comprehensivecybersecurity programs, including policies, standards, procedures, and controls aligned with NIST SP 800-53, DoD RMF, FISMA, NISPOM, and other relevant regulations.

 * Manage the full RMF lifecycle for information systems, including categorization, controlselection/implementation, security assessments, authorization packages (e.g., System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Actions and Milestones (POA&Ms)), and achieving/maintaining ATO/IATT approvals.
 * Conduct risk and vulnerability assessments, identify threats, and recommend prioritized mitigation strategies to reduce organizational risk.
 * Advise senior leadership (e.g., Authorizing Official, Director of IT & Cybersecurity,program managers) on cybersecurity risks, posture changes, resource needs, and security implications of system changes or new technologies.
 * Lead continuous monitoring efforts, including vulnerability scanning, configurationmanagement, audit log reviews, and incident detection/response coordination.
 * Develop and enforce security policies, ensure compliance with DoD/DISA requirements, and oversee security controls for classified and unclassified systems (e.g., cloud, on-premise, air-gapped).
 * Manage and mentor a team of Information System Security Officers (ISSOs), analysts,and support staff; provide training and guidance on security best practices.
 * Coordinate security incident response, including detection, analysis, containment,recovery, reporting, and lessons learned.
 * Facilitate audits, inspections, and compliance reviews; prepare documentation and evidence for external assessors or authorizing officials.
 * Acquire and manage resources (budget, personnel, tools) to support cybersecurityobjectives and embed security into system development lifecycles.
 * Stay current with emerging threats, vulnerabilities, technologies, and regulatory changes to proactively adapt security strategies.
 * Assist with CMMC lvl2-3 (NIST SP 800-171), and ISO270001 accreditation.
 * Assist with other IT & Cybersecurity tasks when needed.