Information System Security Manager

TTM Technologies•Denver, CO

5d•$79,830 - $133,051•Onsite

About The Position

As the Information System Security Manager, you will be responsible for the development, implementation, evaluation, and continuous improvement of the organization’s classified information system security program. The ISSM manages assessment and authorization activities, maintains security documentation, verifies control effectiveness, and advises management on system security risks and resource needs. This position provides accountable oversight of classified information systems, supports timely authorizations, and coordinates corrective actions across security, IT, and program teams. The ISSM works closely with the Facility Security Officer (FSO), Insider Threat Program Senior Official (ITPSO), system owners, and the assigned DCSA Information Systems Security Professional (ISSP).

Requirements

Candidate must be a U.S. Person.
Candidate must have an active SECRET Security Clearance or be able to obtain one.
Bachelor’s degree in information technology, cybersecurity, computer science, or a related discipline, or an equivalent combination of relevant training and professional experience.
At least five years of relevant IT or cybersecurity experience, including three years of hands-on Windows system administration and two years supporting security governance, control implementation, or assessment activities.
Candidate must be a self-starter and possess the ability to operate independently without supervision.
Practical experience with secure configuration, vulnerability remediation, endpoint security, audit logging, backups, and controlled change management.
Excellent communication and leadership skills, with the ability to effectively collaborate with internal and external stakeholders.

Nice To Haves

CISSP, CISM, Security+, or relevant current certification(s)
Experience serving as an ISSM, ISSO, or security lead
In-depth knowledge of information security standards, regulations, and NISP eMASS authorization processes (e.g., NIST SP 800-53, NISPOM, RMF, DAAG).

Responsibilities

Develop and implement information security policies, procedures, and continuous monitoring activities and reports.
Lead the design, implementation, and maintenance of security controls to protect information systems and data.
Conduct regular security assessments and audits to identify vulnerabilities and recommend remediation measures.
Monitor security incidents and coordinate response activities, including incident investigation and resolution.
Install, configure, maintain, troubleshoot, and retire Windows client systems; maintain accurate hardware, software, and configuration records.
Apply approved operating system and application patches, firmware updates, and secure configuration baselines. Test changes, document rollback plans, and use controlled maintenance windows.
Collaborate with cross-functional teams to integrate security requirements into the system development lifecycle processes.
Stay up-to-date with the latest security technologies, trends, and threats to ensure proactive defense strategies.
Provide security awareness and role based training and education to employees to promote a culture of security awareness.
Provide regular reports to management on the status of the information security program, including key metrics and improvements.
Develop system documentation for information system authorization and security management of assigned information systems. (e.g., Authorization to Operate (ATO), System Security Plan (SSP), Plans of Actions and Milestones (POAM), etc.