Information System Security Manager

Booz Allen Hamilton•Warren, MI

2d•$86,900 - $198,000

About The Position

Booz Allen is seeking an Information System Security Manager (ISSM) to support the U.S. Army in the development, operational maintenance, and sustainment of critical systems and networked environments. The ISSM will lead cybersecurity efforts across assigned information systems and ensure security requirements are integrated into operations, engineering, compliance, and Risk Management Framework (RMF) activities. This position will serve as the primary cybersecurity oversight and coordination lead for system security posture, vulnerability management, compliance, and assessment and authorization support.

Requirements

3+ years of experience with cybersecurity, including supporting DoW or Army information systems
Experience supporting RMF assessments, compliance audits, and system authorization activities
Experience managing vulnerability assessments, remediation tracking, and cybersecurity compliance efforts
Experience with ACAS, Nessus or Tenable Security Center, STIG Viewer, and Evaluate STIG
Top Secret clearance
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or Engineering
CISSP, CISM, GSLC, or CCISO Certification

Nice To Haves

Experience serving as an ISSM, ISSO, cybersecurity lead, or system security compliance manager in a DoD environment
Experience supporting Army programs, platform systems, or enclave environments
Experience with system hardening, patch management, audit readiness, and continuous monitoring activities
Experience briefing cybersecurity risks, findings, and recommendations to leadership
Experience tailoring, implementing, and monitoring JSIG controls on DoW information systems
Ability to coordinate across technical and non-technical stakeholders
Possession of excellent written and verbal communication skills
TS/SCI clearance

Responsibilities

Serve as the ISSM for assigned systems and act as the principal advisor on system cybersecurity posture, security controls, and compliance.
Oversee implementation and sustainment of cybersecurity requirements across system lifecycles, including development, fielding, maintenance, and operational support.
Manage RMF execution and system assessment and authorization activities, including review of RMF artifacts, identification of control deficiencies, and coordination of corrective actions.
Establish and maintain cybersecurity program control processes for certification testing, compliance documentation, inspections, periodic audits, investigations, software research, hardware introduction, and release activities.
Review vulnerability assessments and compliance audit results, triage and prioritize findings, direct remediation efforts, and track closure of deficiencies.
Ensure systems are maintained in compliance with RMF controls, enclave policy, local policy, and applicable cybersecurity requirements through configuration management, system hardening, and patch management oversight.
Coordinate with ISSOs, ISSEs, administrators, program managers, and stakeholders to integrate security controls and resolve cybersecurity integration and verification issues.
Oversee use of enterprise cybersecurity and compliance tools, including ACAS, Nessus or Tenable Security Center, STIG Viewer, and Evaluate STIG, to assess system posture and support audit readiness.
Maintain documentation, status reporting, and cybersecurity readiness metrics for leadership and authorizing stakeholders.