Information Systems Security Manager (ISSM)

Veilant • Tysons, VA

2d • Onsite

About The Position

Veilant is seeking an Information Systems Security Manager (ISSM) to lead a shift in how cyber security and assurance are delivered across mission and enterprise systems. This role serves as the primary security advisor and a trusted bridge between the Information Security Program and government mission partners. The ISSM will be the go-to person for engineering teams seeking security input before design finalization and for customers with questions about risk or compliance. The position is ideal for someone who believes Risk Management Framework (RMF) can be a discipline that improves systems, not just a compliance tax. The ISSM will be responsible for RMF accreditation end-to-end for in-scope systems, including authoring and maintaining System Security Plans, policies, and procedures; building ATO packages; writing justifications; assembling evidence; managing auditor reviews; directly answering government questions; and ensuring continuous monitoring post-authorization. Key responsibilities include maintaining compliance integrity by regularly reviewing systems for configuration drift, reporting findings, and driving remediation. The ISSM will also act as the in-house expert on NIST CSF, SP 800-171, SP 800-53, CMMC, and the DoD Zero Trust Mandate, translating requirements into practical system implications. A critical aspect of the role is integrating security as a design input, identifying security requirements early in the architecture phase and advising mission teams on how their work aligns with authorization processes for software, wireless, and cloud approvals to prevent last-minute blockers.

Requirements

• Active TS/SCI with Polygraph clearance.
• Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, or a related field, or equivalent hands-on experience.
• 5+ years of progressively increasing responsibility supporting cybersecurity, information assurance, risk management, or compliance for classified and unclassified programs within the U.S. Government or as a cleared contractor.
• Direct RMF experience, including building ATO packages and owning the relationship with an authorizing official.
• Applied technical depth in one or more of the following: cloud and external services, system administration, configuration management, system and network architecture, operational technology, wireless, telecommunications security, supply chain risk, or security analysis tooling (Splunk, Nessus, Wireshark, etc.).
• Strong communication skills, able to brief both engineers and executives on risks and actions.
• Willingness to work predominantly on-site in cleared facilities in Northern Virginia.

Nice To Haves

• Experience standing up or maturing a security program rather than maintaining an established one.
• CISSP, CISM, or equivalent certification.
• Direct experience implementing DoD Zero Trust requirements or CMMC readiness.
• A track record of turning a skeptical mission team into a partner.

Responsibilities

• Lead RMF accreditation end-to-end for in-scope systems.
• Author and maintain System Security Plans, policies, and procedures.
• Build ATO packages, write justifications, and assemble evidence.
• Manage auditor reviews and answer government questions directly.
• Ensure continuous monitoring runs long after authorization is signed.
• Review systems regularly for drift from documented configurations and procedures.
• Report findings without softening and drive remediation to closure.
• Serve as the expert on NIST CSF, SP 800-171, SP 800-53, CMMC, and DoD Zero Trust Mandate.
• Identify security requirements early and ensure they are built into architecture.
• Advise mission teams on how their work maps to authorization processes (software, wireless, cloud approvals).

Benefits

• Flexible PTO + holidays
• Generous 401k match benefit up to 10%, with an automatic 3% safe harbor contribution and additional matching based on employee contributions.
• Medical (HSA & PPO Plans Available), dental, vision, disability, and life insurance
• Employer Contribution to Health Savings Account (HSA)
• Learning & Development opportunities
• Professional coaching services
• Get the technology you want to do your job
• Free daily snacks & drinks

What This Job Offers

• Job Type: Full-time
• Career Level: Senior