Cleared Information System Security Manager (ISSM) L4 - Lorton, VA

Military Spouse Corporate Career Network•Lorton, VA

8d•Onsite

About The Position

Virtual Service Operations is searching for an Information System Security Manager (ISSM) to join their dynamic team of experts in Lorton, VA. In this role, you will oversee the security of program information systems, ensuring compliance with industry standards and regulations while developing and implementing security policies and procedures. You'll manage the Risk Management Framework lifecycle, oversee ISSOs under your purview, and serve as a key point of coordination across configuration management, risk assessment, and incident response activities. Candidates should bring strong leadership, deep familiarity with security standards such as NIST and ISO 27001, and a background managing information security in classified DoD environments.

Requirements

Must possess an active TS/ SCI clearance or above
Bachelor's degree in Computer Science, Engineering, Finance, Business, or a related field AND 3+ years of leadership experience in a relevant area of business, OR equivalent experience.
8+ years of demonstrated performance in related technology.
5+ years of experience in information security management.
5+ years of related experience in SCI/SAP environments.
Active TS/ SCI security clearance.
Strong knowledge of security standards and regulations (e.g., ISO 27001, NIST, HIPAA).
Experience with security tools and technologies (e.g., firewalls, intrusion detection/prevention systems, SIEM).
Excellent communication and leadership skills.
Must be within driving distance of Lorton, VA OR willing to relocate there (relocation packages available)
Must be willing to work onsite
Strong written and verbal communication skills with excellent attention to detail and documentation accuracy.
Ability to work independently and collaboratively in a mission-focused environment.
Must be willing and able to travel up to 25%.
Must possess an active TS/ SCI clearance or above
Pursuant to a government contract, this specific position requires U.S. citizenship status
You are an excellent communicator in writing and speaking.
You have the ability to work independently but also value teamwork.
Your problem-solving skills are excellent.
You are looking for a job where performance appraisals occur regularly, and you look forward to advancing your career.
You seek a community of virtue-centered co-workers and clients.

Nice To Haves

Technical certifications in Azure.
DoD IAT Level III Certification (CISSP or CASP).
5+ years of leadership experience in a relevant area of business.

Responsibilities

Develop and maintain a formal IS security program and policies for the Edge environment.
Develop and implement information security policies and procedures, and oversee operational IS security implementation guidelines.
Coordinate with the PSO or cognizant security official on approval of external information systems.
Ensure ISSOs under your purview are appointed in writing and follow established IS policies and procedures; assume ISSO responsibilities in their absence.
Conduct risk assessments and vulnerability testing, and ensure periodic security posture testing is performed using intrusion/attack detection and monitoring tools.
Monitor and respond to security incidents and threats.
Maintain a repository of all organizational- and system-level cybersecurity documentation, including ATOs.
Coordinate IS security inspections, tests, and reviews, and manage security audits and assessments.
Ensure configuration management policies are followed for all hardware/software changes, coordinating with the appropriate AO prior to implementation.
Serve as a voting member of the Configuration Control Board (CCB) and/or Risk Executive Board, with authority to veto changes deemed detrimental to security.
Manage, maintain, and execute the information security continuous monitoring plan.
Ensure a record of all security-related vulnerabilities is maintained, and report serious or unresolved violations to the AO/DAO.
Develop and deliver security awareness training to employees.
Maintain working relationships with the ISO, AO, SCA, and other ISSMs, and provide guidance to cybersecurity teammates.