Information Systems Security Manager (ISSM) - ABQ
About The Position
The Information Systems Security Manager will support a government client as a cybersecurity subject matter expert and Contractor ISSM. The role provides technical advisory, systems security engineering, and risk-management support to Federal Program Managers and the federal ISSM/Authorizing Official. It supports IT, OT, and enabling systems across acquisition lifecycles, including execution of the NIST Risk Management Framework, systems security engineering, and continuous monitoring. The position coordinates stakeholders and provides program oversight to help identify, manage, and communicate cybersecurity risks. The role is part of Deloitte’s Cybersecurity and Technology Risk team, which helps government organizations manage cyber risk across mission-focused IT, OT, and acquisition environments. The team combines cybersecurity engineering, risk management, governance, and program-delivery capabilities to support system authorization and sustainment.
Requirements
- At least 5 years of experience performing cybersecurity, ISSM, NIST RMF, or systems security engineering activities for federal information systems, including authorization and continuous monitoring.
- Experience applying cybersecurity and supply-chain risk-management practices to IT, OT, or enabling systems across system or acquisition lifecycles.
- Experience preparing cybersecurity documentation, technical reports, and briefings for program, engineering, and client stakeholders.
- Current CISSP certification issued by ISC2.
- Ability to travel an average of 25%, based on work, clients, and industries or sectors served.
- Must be legally authorized to work in the United States without employer sponsorship now or at any time in the future.
- Ability to work independently and collaboratively as part of a team.
- Effective written and verbal communication skills.
- Meticulous attention to detail and quality of work product.
- Ability to build and sustain professional relationships.
- Ability to lead projects or workstreams.
- Ability to manage and prioritize multiple tasks in a fast-paced, dynamic environment.
- Strong interpersonal skills and professional demeanor.
- Ability to meet deadlines.
- Ability to mentor and provide clear guidance to others.
Nice To Haves
- Experience supporting software lifecycle activities.
- Experience applying systems engineering practices to IT, OT, enabling systems, or weapons-acquisition programs.
- Experience supporting the Defense Acquisition System (DoD 5000.1).
Responsibilities
- Lead RMF execution activities, including security categorization, control implementation, assessment support, authorization package development, and continuous monitoring.
- Provide systems security engineering support for IT, OT, enabling systems, and weapons-acquisition programs throughout their acquisition lifecycles.
- Advise Federal Program Managers and the federal ISSM/Authorizing Official on cybersecurity risks, compliance considerations, remediation priorities, and risk-management decisions.
- Coordinate with program offices, engineering teams, acquisition stakeholders, and external partners to align cybersecurity requirements with program activities.
- Oversee cybersecurity metrics, risk tracking, supply-chain risk-management activities, and program reporting to identify and address security issues.
Benefits
- Broad range of employee benefits.
- May be eligible to participate in a discretionary annual incentive program, subject to program rules and applicable factors.
- Opportunities to build new skills, take on leadership opportunities, and develop through mentorship and formal development programs.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
