Information System Security Manager (6342)

MetroStar•Washington, DC

20h•Remote

About The Position

As Information System Security Manager (ISSM) , you’ll provide cybersecurity leadership for a mission-critical enterprise system with our customer supporting Department of the Air Force operations. The platform enables facilities and space planning, work order and move management, and performance tracking across the organization. The ISSM independently leads all cybersecurity and ATO activities to maintain system authorization and availability in a high-visibility environment, partnering with technical teams, stakeholders, and senior government leadership. We know that you can’t have great technology services without amazing people. At MetroStar, we are obsessed with our people and have led a two-decade legacy of building the best and brightest teams. Because we know our future relies on our deep understanding and relentless focus on our people, we live by our mission: A passion for our people. Value for our customers. If you think you can see yourself delivering our mission and pursuing our goals with us, then check out the job description below!

Requirements

Active Secret security clearance.
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent experience.
7+ years of experience in DoW cybersecurity or information assurance roles.
3+ years’ experience serving as an ISSM or leading RMF and ATO efforts for an operational DoW system.
At least one DoW IAT or IAM Level III certification such as CISSP, CISM, CASP+, GSLC, or equivalent.
Strong working knowledge of DoW RMF processes and NIST SP 800-53 security controls.
Experience supporting systems through operations and sustainment while managing ATO requirements.
Ability to work independently and fully remote and lead efforts and collaborate effectively with distributed teams.
Proven ability to operate independently and proactively, with minimal oversight.
Strong ownership mindset with the ability to drive work forward in the absence of existing structure.
Demonstrated success meeting tight timelines and recovering behind-schedule cybersecurity efforts.
Ability to work directly across multiple stakeholders, including business users, technical teams, and senior government leaders.
Excellent written and verbal communication skills, particularly for explaining cybersecurity requirements to non-technical audiences.
Strong organizational skills and attention to detail in documentation and compliance efforts.

Responsibilities

Cybersecurity Leadership and ATO Execution Serve as the designated ISSM for the system. Independently lead all cybersecurity and RMF activities required to achieve and maintain system authorization. Take ownership of an ongoing reauthorization effort and drive documentation, coordination, and execution to completion. Develop, update, and manage RMF artifacts including the System Security Plan, POA&Ms, security assessment documentation, and continuous monitoring materials. Work directly with the system administrator, development team, and government stakeholders to close gaps and meet required milestones.
Operations and Sustainment Support a production system that must remain operational while authorization activities are underway, ensuring continuity of service and risk awareness. Oversee security controls during steady-state operations, quarterly system updates, and as-needed enhancements. Ensure cybersecurity considerations are integrated into system updates and limited CAD-related functionality. Identify, assess, and manage risks proactively, tracking remediation activities through POA&M closure.
Stakeholder Engagement and Communication Act as the primary cybersecurity point of contact for leadership, the system administrator, developers, and supporting technical teams. Engage directly with business users, technical staff, and senior leaders to translate cybersecurity requirements into clear, actionable guidance. Coordinate closely with the government lead and system administrator to drive progress, resolve issues, and maintain transparency. Operate effectively in a fully remote environment, collaborating through Microsoft Teams and other virtual tools.