Information Systems Security Manager

Summit Federal Services, LLC•Winston-Salem, NC

2d•Hybrid

About The Position

Summit Federal Services, LLC (SFS) with headquarters in Oakland, Maryland, is a fast growing woman owned Small Business and HUBZone company with an outstanding record of performance providing more effective and efficient acquisition, business process, training, IT, administrative and security services to multiple federal agencies. SFS/Merito is looking for a Information Systems Security Manager to spearhead their client organizations information security program. The ISSM will lead the development and implementation of security measures, ensuring compliance with industry regulations, frameworks, and company policies. The ideal candidate will bring expertise in cybersecurity, risk management, and information systems security compliance to protect the organization’s critical assets

Requirements

U.S. Citizenship.
Active Secret Clearance.
Prior experience as an ISSM or ISSO, with strong familiarity in establishing classified networks and information systems.
Experience as a COMSEC Custodian and in handling security controls for classified information systems.
Proficiency in cybersecurity frameworks and risk management practices, including the Risk Management Framework (RMF) and DoD compliance requirements.

Nice To Haves

Relevant certifications such as CISSP, CISM, or Security+
Familiarity with cybersecurity tools, auditing processes, and incident response frameworks.

Responsibilities

Lead the establishment and maintenance of classified networks and operating systems.
Develop and maintain technical documentation and security policies for IT equipment within open storage areas.
Determine technical Information Assurance (IA) requirements and conduct cyber risk assessments, including vulnerability analysis and implementation of mitigation solutions in alignment with RMF standards.
Author and manage security documentation for system authorization, continuous monitoring, and information systems lifecycle management (e.g., Authorization to Operate (ATO), System Security Plan (SSP), Plans of Action and Milestones (POAM).
Provide guidance and technical expertise in the creation of solutions for complex security problems, requiring deep knowledge of systems security.
Ensure that security controls are implemented effectively and continuously throughout the information systems lifecycle.
Utilize cybersecurity tools to provide ongoing security monitoring for infrastructure in accordance with Department of Defense (DoD) requirements.
Perform system audits, vulnerability risk assessments, and investigations into security incidents or violations related to information assurance.
Conduct regular training and awareness programs on cybersecurity best practices and risk mitigation strategies for all system users.
Other duties as required.