> Markdown version of [/jobs/ext/4391325-information-systems-security-manager-issm](https://www.wearedevelopers.com/jobs/ext/4391325-information-systems-security-manager-issm). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Systems Security Manager (ISSM) - **Company:** AMERICAN SYSTEMS - **Location:** Colorado Springs, CO, United States - **Salary:** $191,500.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, System Configuration, Software Vulnerability Management, Vulnerability Analysis - **Published:** October 31, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9281651/information-systems-security-manager-issm ## About the Role * Bachelor's degree and 11-12 years of related work experience * TS/SCI clearance * U.S. Citizenship Required for the purposes of obtaining/holding a U.S. security clearance * Must meet DoD 8140 qualification requirements for the Information Systems Security Manager work role, designated as work role code 722 at the Advanced proficiency level. * Must have one or more of the following certs: CISM, CISSP, FITSP-M, GCIH, GCIA, GICSP, GSLC, or ISSMP ## Description * Perform as ISSM for up to five MD9 mission systems and serve as principal advisor on all matters involving IS security. * Provide security program/policy, ISSO oversight, certifications, vulnerability monitoring, testing, documentation repository, inspections, incidents, training, CCB/Risk Board support, CONMON, and authorization impact assessment. * Responsible for developing, implementing, and maintaining comprehensive cybersecurity strategies across network environments. * Execute hands-on configuration of security policies, technical controls, and procedural frameworks to ensure full compliance with DoD Information Assurance Risk Management Framework (DIARMF) standards. * Author detailed security assessment reports, System Security Plans (SSPs), and Risk Assessment Reports (RARs) for multiple Authority to Operate (ATO) packages. Conduct comprehensive security control testing and vulnerability assessments. * Provide technical leadership and guidance on systems security engineering best practices to project teams and stakeholders. * Oversee cybersecurity integration across systems, ensuring security controls are effectively implemented during design, development, test, deployment, and sustainment. * Support vulnerability management activities, including scanning, analysis, remediation planning, and status reporting.