Information System Security Manager (ISSM)

Occam Solutions•Arlington, VA

1d•Onsite

About The Position

We are seeking an experienced Information System Security Manager (ISSM) to oversee cybersecurity governance, risk management, and compliance activities supporting critical U.S. Army information systems. The ISSM will lead Risk Management Framework (RMF) execution, manage Authority to Operate (ATO) activities, oversee vulnerability management, and ensure compliance with Department of Defense (DoD) and NIST cybersecurity requirements. This position requires strong technical expertise, leadership capabilities, and experience working with government stakeholders, system owners, and cybersecurity teams.

Requirements

5+ years of cybersecurity or information assurance experience.
Active Secret security clearance.
Strong knowledge of NIST SP 800-53, RMF, and ATO lifecycle processes.
Experience leading security governance, compliance, and risk management efforts.
Experience supervising ISSOs or coordinating security activities across multiple technical teams.
Strong communication skills for executive updates, audit support, and risk briefings.
Familiarity with vulnerability scanning tools, STIG validation, POA&M governance, and security documentation.

Nice To Haves

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field.
Relevant DoD 8140 certifications, such as CISSP.
Prior team leadership or security oversight experience.
Experience supporting DoD or federal cybersecurity programs.
Ability to operate effectively in fast-paced, compliance-driven environments.
Strong judgment in evaluating cyber risk and balancing mission requirements.
Detail-oriented approach to cybersecurity documentation and monitoring.

Responsibilities

Lead RMF implementation and continuous monitoring activities across assigned systems.
Manage ATO processes, security authorization packages, and compliance documentation.
Supervise and mentor Information System Security Officers (ISSOs).
Oversee vulnerability assessments, security control evaluations, and remediation activities.
Manage Plans of Action and Milestones (POA&Ms).
Ensure compliance with NIST SP 800-53 and applicable DoD security requirements.
Coordinate with Authorizing Officials, system owners, engineers, and program leadership.
Develop security policies, procedures, and risk mitigation strategies.
Prepare cybersecurity risk assessments, executive briefings, and compliance reports.
Support audits, security assessments, and incident response coordination.