Information Systems Security Manager (ISSM) - Senior

Modern Technology Solutions Inc•Huntsville, AL

About The Position

We are seeking an experienced Senior Information System Security Manager (ISSM) to lead cybersecurity efforts for a strategic Department of Defense (DoD) initiative focused on space-based operations and national defense. As the ISSM, you will play a key leadership role in managing and overseeing the security posture of information systems, ensuring their compliance with DoD standards and the Risk Management Framework (RMF). You will work across multidisciplinary teams to maintain the confidentiality, integrity, and availability of the program's critical systems and data. Responsibilities: As the ISSM, your responsibilities will include: Cybersecurity Program Management: Establish, implement, and enforce security policies, procedures, and plans for information systems in accordance with DoD and RMF requirements. Oversee the development and maintenance of System Security Plans (SSPs), ensuring updates are in line with changing operational requirements or regulations. Conduct regular evaluations to ensure systems adhere to DoD directives and maintain a strong security posture. Risk Management Framework (RMF) Oversight: Lead the RMF process for systems, including categorization, security controls implementation, testing, and continuous monitoring. Ensure timely submission of Authorization to Operate (ATO) packages and maintain systems' authorization status. Collaborate with stakeholders to identify risks and implement mitigation strategies to ensure mission success. Incident Response and Risk Mitigation: Manage cybersecurity incidents, including detection, analysis, containment, recovery, and reporting in coordination with DoD policies. Provide leadership in identifying vulnerabilities and risks associated with program systems, and deploy solutions to reduce exposure. Develop contingency and disaster recovery plans to maintain operational resilience. Leadership and Collaboration: Serve as the primary cybersecurity advisor to program leadership, engineering teams, and DoD stakeholders for program systems. Mentor and lead information security team members in compliance efforts and technical execution. Coordinate with external agencies, vendors, and contractors to align cybersecurity requirements across systems. Continuous Monitoring and Reporting: Implement and oversee continuous monitoring programs for real-time risk assessment and cybersecurity status tracking. Prepare and deliver briefings, reports, and metrics to leadership and key stakeholders regarding system security posture and cyber readiness.

Requirements

Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, or related technical field.
10+ years of experience as an ISSM or similar leadership position in cybersecurity, preferably supporting DoD programs.
Comprehensive knowledge of DoD cybersecurity standards, RMF, NIST SP 800-53 controls, and FISMA.
Proven expertise in managing cybersecurity programs for mission-critical systems and obtaining/maintaining ATOs.
Familiarity with security tools such as STIGs, ACAS, Nessus, or Splunk.
Strong leadership, analytical, and communication skills with the ability to manage multidisciplinary teams and complex challenges.
Active TOP SECRET (TS) clearance with eligibility for Sensitive Compartmentalized Information (SCI).
U.S. Citizenship is required for this position.

Nice To Haves

Advanced degree preferred.
CISSP, CISM, CEH, or similar cybersecurity certifications.
Hands-on experience with space-based or satellite communication systems cybersecurity.
Knowledge of advanced cybersecurity technologies (e.g., machine learning for threat detection, quantum-resistant encryption).
Experience supporting DoD national security-focused programs.

Responsibilities

Establish, implement, and enforce security policies, procedures, and plans for information systems in accordance with DoD and RMF requirements.
Oversee the development and maintenance of System Security Plans (SSPs), ensuring updates are in line with changing operational requirements or regulations.
Conduct regular evaluations to ensure systems adhere to DoD directives and maintain a strong security posture.
Lead the RMF process for systems, including categorization, security controls implementation, testing, and continuous monitoring.
Ensure timely submission of Authorization to Operate (ATO) packages and maintain systems' authorization status.
Collaborate with stakeholders to identify risks and implement mitigation strategies to ensure mission success.
Manage cybersecurity incidents, including detection, analysis, containment, recovery, and reporting in coordination with DoD policies.
Provide leadership in identifying vulnerabilities and risks associated with program systems, and deploy solutions to reduce exposure.
Develop contingency and disaster recovery plans to maintain operational resilience.
Serve as the primary cybersecurity advisor to program leadership, engineering teams, and DoD stakeholders for program systems.
Mentor and lead information security team members in compliance efforts and technical execution.
Coordinate with external agencies, vendors, and contractors to align cybersecurity requirements across systems.
Implement and oversee continuous monitoring programs for real-time risk assessment and cybersecurity status tracking.
Prepare and deliver briefings, reports, and metrics to leadership and key stakeholders regarding system security posture and cyber readiness.