Information Systems Security Manager

Booz Allen Hamilton•Honolulu, HI

5d•$86,900 - $198,000

About The Position

Information Systems Security Manager The Opportunity: Department of War (DoW) information systems require continuous, disciplined oversight to stay authorized to operate and defensible against evolving threats. As a Senior Information System Security Manager (ISSM), you will own that oversight — serving as the principal cybersecurity authority for one or more system authorization packages across their full lifecycle. You'll manage the RMF process end-to-end: categorizing systems, selecting and tailoring controls, overseeing assessment and authorization activities, and maintaining continuous monitoring posture after ATO. You'll supervise a team of ISSOs, assigning control families, reviewing their work, and consolidating it into authoritative packages in eMASS. You'll coordinate directly with Authorizing Officials (AO), Authorizing Official Designated Representatives (AODR), Security Control Assessors (SCA), and program leadership to resolve findings, manage POA&Ms, and drive packages to authorization on schedule. This role combines technical depth in NIST SP 800-53/800-37/800-137 with the leadership to run a compliance program: you'll set standards for documentation and artifact management, train and mentor ISSOs, and represent the security posture of your systems to senior stakeholders. Join us. The world can't wait.

Requirements

8+ years of experience in cybersecurity compliance, information assurance, or IT security operations
Experience serving as an ISSM, ISSO, or RMF authorization role on DoD/DoW systems
Experience managing RMF Steps 1-6: Categorize through Authorize, and Step 7: Continuous Monitoring
Experience with eMASS, including authorization package development, control implementation statements, POA&M management, and artifact and evidence management
Experience supervising or mentoring ISSOs or junior compliance staff
Experience preparing systems for and supporting compliance audits, inspections, or assessments
Ability to communicate security risk and compliance status clearly to senior leaders, AOs, and SCAs
TS/SCI clearance
Bachelor's degree
DoD 8570/8140 IAM Level III certification

Nice To Haves

Experience with defense or national security issues in a specific theater or combatant command environment
Experience working at a DoD/DoW Command-level Headquarters
Experience with CNSSI 1253, NIST SP 800-53B, and DoD-specific overlays
Experience developing internal SOPs, naming conventions, or governance frameworks for artifact and control management
Experience with system boundary changes, categorization changes, or reauthorization packages
Experience hiring, interviewing, or building out a compliance team
Knowledge of cloud-hosted DoD systems, such as AWS, Azure, or GCP
Master's degree

Responsibilities

Manage the RMF process end-to-end: categorizing systems, selecting and tailoring controls, overseeing assessment and authorization activities, and maintaining continuous monitoring posture after ATO.
Supervise a team of ISSOs, assigning control families, reviewing their work, and consolidating it into authoritative packages in eMASS.
Coordinate directly with Authorizing Officials (AO), Authorizing Official Designated Representatives (AODR), Security Control Assessors (SCA), and program leadership to resolve findings, manage POA&Ms, and drive packages to authorization on schedule.
Set standards for documentation and artifact management.
Train and mentor ISSOs.
Represent the security posture of your systems to senior stakeholders.