Information System Security Manager (ISSM)

Omniscius Consulting•Lorton, VA

About The Position

Our client is seeking an experienced Information System Security Manager (ISSM) to support a Department of Defense program in Lorton, Virginia. The ISSM oversees the security of program information systems, ensures compliance with industry and DoD standards, and develops and implements security policies and procedures. The role works closely with ISSOs, system administrators, the Authorizing Official (AO), and other program stakeholders to maintain a strong security posture across classified systems.

Requirements

5–7+ years of experience in information security management.
5+ years of experience in SCI/SAP environments.
Bachelor's degree in Computer Science, Information Technology, or a related field.
Strong knowledge of security standards and regulations, including NIST, ISO 27001, and HIPAA.
Experience with security tools and technologies such as firewalls, IDS/IPS, and SIEM.
Excellent communication and leadership skills.

Nice To Haves

AZ-500 (Azure Security Engineer Associate), SC-100 (Cybersecurity Architect Expert), AZ-305 (Azure Solutions Architect Expert), or a similar certification.
5+ years of leadership experience in a relevant business area.
Technical certifications in Azure.

Responsibilities

Develop and maintain a formal information systems security program and policies for operational environments.
Develop and oversee operational information systems security implementation policy and guidelines.
Coordinate with the PSO or cognizant security official on approval of external information systems.
Ensure ISSOs under their purview are appointed in writing and follow established information system policies and procedures; assume ISSO responsibilities in their absence when needed.
Ensure system administrators monitor resources for system vulnerabilities or ongoing attacks and conduct periodic security testing.
Ensure approved procedures are used to sanitize and release system components and media.
Maintain a repository of cybersecurity-related documentation, including ATOs, for all systems under their purview.
Coordinate information system security inspections, tests, and reviews, and ensure appropriate response when an incident or vulnerability is discovered.
Ensure configuration management policies are followed for hardware and software changes, coordinating with the AO before implementation.
Serve as a voting member of the Configuration Control Board (CCB) and/or Risk Executive Board, with authority to flag proposed changes deemed a security risk.
Manage, maintain, and execute the information security continuous monitoring plan.
Maintain working relationships with the ISO, AO, SCA, and other ISSMs, and provide guidance to the broader cybersecurity team.