Information System Security Manager (ISSM)

Occam Solutions•Arlington, VA

4d•Onsite

About The Position

The Information System Security Manager (ISSM) will oversee cybersecurity governance, risk management, and compliance activities supporting critical U.S. Army information systems. The role leads Risk Management Framework (RMF) execution, manages Authority to Operate (ATO) activities, oversees vulnerability management, and ensures compliance with Department of Defense (DoD) and NIST cybersecurity requirements. It requires technical expertise, leadership capabilities, and experience working with government stakeholders, system owners, and cybersecurity teams. The position supports the U.S. Army ASA(ALT) – TGL 45 program, is onsite 3–5 days per week, and requires an active Secret clearance.

Requirements

At least 5 years of cybersecurity or information assurance experience.
Active Secret security clearance.
Strong knowledge of NIST SP 800-53, RMF, and ATO lifecycle processes.
Experience leading security governance, compliance, and risk management efforts.
Experience supervising ISSOs or coordinating security activities across multiple technical teams.
Strong communication skills for executive updates, audit support, and risk briefings.
Familiarity with vulnerability scanning tools, STIG validation, POA&M governance, and security documentation.

Nice To Haves

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field.
Relevant DoD 8140 certifications, such as CISSP.
Prior team leadership or security oversight experience.
Experience supporting DoD or federal cybersecurity programs.
Ability to operate effectively in fast-paced, compliance-driven environments.
Strong judgment in evaluating cyber risk and balancing mission requirements.
Detail-oriented approach to cybersecurity documentation and monitoring.

Responsibilities

Lead RMF implementation and continuous monitoring activities across assigned systems.
Manage ATO processes, security authorization packages, and compliance documentation.
Supervise and mentor Information System Security Officers (ISSOs).
Oversee vulnerability assessments, security control evaluations, and remediation activities.
Manage Plans of Action and Milestones (POA&Ms).
Ensure compliance with NIST SP 800-53 and applicable DoD security requirements.
Coordinate with Authorizing Officials, system owners, engineers, and program leadership.
Develop security policies, procedures, and risk mitigation strategies.
Prepare cybersecurity risk assessments, executive briefings, and compliance reports.
Support audits, security assessments, and incident response coordination.