> Markdown version of [/jobs/ext/4274156-information-systems-security-manager-issm](https://www.wearedevelopers.com/jobs/ext/4274156-information-systems-security-manager-issm). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Systems Security Manager (ISSM)

- **Company:** Decision Technologies Inc
- **Location:** Austin, TX, United States
- **Experience:** Experienced
- **Salary:** $115,000.0 - $130,000.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Identity and Access Management, Information Security Management, Intrusion Detection Systems, Network Security, Network Administration, Service Pack, Software Vulnerability Management, SARS Software Products, Firewalls (Computer Science), Nessus, Vulnerability Analysis
- **Published:** October 18, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=e78aa3bd84286596

## About the Role

Technical Knowledge

 * Deep understanding of DoD SIPRNet architecture and classified network handling rules.
 * Proficiency in network security principles including firewalls, IDS/IPS, encryption technologies, and cross-domain constraints.
 * Experience managing secure enclaves, boundary protections, and classified physical security requirements.
 * Hands-on experience with vulnerability scanning and auditing tools such as ACAS/Nessus.

RMF & Security Governance

 * In-depth knowledge of DoD Risk Management Framework lifecycle.
 * Strong ability to create, review, and maintain RMF control evidence and accreditation documentation.
 * Experience interacting with AOs, cybersecurity compliance teams, and inspection authorities.

Soft Skills

 * Excellent written and verbal communication skills.
 * Ability to prepare and deliver leadership briefings.
 * Highly organized, detail-oriented, and capable of managing multiple concurrent tasks.

Certifications:

 * DoD 8570/8140 IAM Level II or III (e.g., CAP, CISSP, CASP+, CISM, GSLC, or equivalent).

Education & Experience:

 * Bachelor's degree from an accredited university, OR CNSSI 4012 certificate OR ADQ GA7.
 * 3-5 years of experience as an ISSM, ISSO, or similar cybersecurity leadership role.

## Description

The Information System Security Manager (ISSM) is responsible for providing cybersecurity oversight, governance, and compliance management for the organization's SIPRNet circuit and associated classified information systems. This role ensures full compliance with DoD, IC, and federal cybersecurity requirements, maintains system accreditation, and leads security operations supporting mission-critical classified environments., Cybersecurity Program Leadership

 * Lead and manage the cybersecurity program for the SIPR circuit and all connected classified systems.
 * Ensure full compliance with DoD, Intelligence Community, and federal cybersecurity policies including RMF, NIST SP 800-53, CNSSI 1253, and applicable DoD instructions.

Risk Management & Compliance

 * Oversee the development, documentation, review, and maintenance of RMF artifacts including SSPs, CONOPS, POA&Ms, SARs, and continuous monitoring records within eMASS.
 * Conduct or supervise risk assessments, vulnerability evaluations, and threat analysis.
 * Identify residual risks and recommend appropriate mitigation strategies.
 * Maintain the system's Authorization to Operate (ATO) and ensure all continuous monitoring requirements are met.

System Hardening & Change Management

 * Review and approve security-relevant configuration or software changes affecting the SIPR network.
 * Validate implementation of STIGs, configuration baselines, security patches, and vulnerability remediation.
 * Coordinate with network administrators, ISSOs, engineers, and security teams to ensure system hardening and compliance activities are executed correctly.

Boundary & Data Protection

 * Ensure proper handling, transmission, and storage of classified data.
 * Validate appropriate boundary protection mechanisms, enclave configurations, and physical security requirements for SIPR systems.

Audit, Inspection, & Documentation

 * Maintain accurate, auditable security documentation and system records.
 * Prepare required cybersecurity reports for inspections, audits, and system reviews.
 * Lead remediation efforts addressing audit findings, compliance gaps, and security vulnerabilities.

Incident Response & Monitoring

 * Manage cybersecurity incident response procedures for the SIPR environment.
 * Coordinate reporting to government authorities as required by DoD policy.

Access Control & User Training

 * Oversee account management, auditing, and access control enforcement.
 * Ensure all SIPR users complete required cybersecurity training and understand proper classified handling procedures.

Communication & Stakeholder Coordination

 * Brief leadership, participate in meetings, and engage with auditors, AOs/DAOs, and other cybersecurity stakeholders.
 * Communicate technical security issues clearly to both technical and non-technical audiences.