Security Manager (Enterprise Security)

MATSYS•Sterling, VA

5d•$100,000 - $135,000

About The Position

We are seeking a seasoned Security Manager to lead the enterprise security program for a rapidly growing federal government contractor. This is a high-impact leadership role responsible for building, managing, and continuously improving a holistic security program spanning physical, personnel, operational, information, cyber, and AI security. You will ensure the protection of people, facilities, systems, and intellectual property while ensuring strict compliance with federal security requirements. You will serve as the company’s primary security authority and a strategic partner to leadership, IT, HR, Legal, program teams, and government customers/oversight agencies.

Requirements

Bachelor’s degree in Security Management, Criminal Justice, Information Security, Homeland Security, or related field—or equivalent relevant experience.
7+ years of professional security experience, including 3+ years in a leadership or program management role.
Experience supporting federal government programs and familiarity with NISPOM and DoD/agency directives.
Hands-on experience across multiple security domains (physical, personnel, operational, information).
Working knowledge of cybersecurity concepts and at least one major framework (NIST 800-53, 800-171, RMF, FISMA, or CMMC).
Experience with insider threat programs and conducting investigations.
Active U.S. security clearance ([Secret / Top Secret / TS‑SCI]) or ability to obtain and maintain one; U.S. citizenship required.
Strong leadership, communication, and decision-making skills with the ability to handle sensitive information discreetly.

Nice To Haves

Previous experience as an FSO, CSSO, ISSM, or ISSO.
Experience managing SCIFs/SAPFs or other accredited secure facilities.
Familiarity with AI/ML security practices and the NIST AI RMF.
OPSEC certification or experience running an OPSEC program.
Professional certifications such as CISSP, CISM, CPP, PSP, or Security+.
Experience leading multi-site or enterprise-wide security programs.
Proficiency with security tools and systems (SIEM, access control platforms, threat intelligence systems, DCSA/NISS, DISS).

Responsibilities

Own and execute the enterprise security strategy, policies, and governance model.
Serve as the primary security liaison for government customers, DCSA, and other oversight bodies.
Maintain and improve the security program, risk register, KPIs, and compliance reporting.
Ensure compliance with NISPOM, DoD/agency directives, contract-specific requirements, and related government regulations.
Lead or coordinate FSO/CSSO/ISSM responsibilities and facility security operations.
Maintain compliance with NIST SP 800-53/800-171, RMF, FISMA, CMMC, and related frameworks.
Manage personnel security processes: clearances, eligibility, continuous vetting, and reporting in DISS/NISS and related systems.
Oversee or closely partner on cybersecurity controls, monitoring, and incident response.
Establish and enforce AI/ML security practices, including model, data, and system protections aligned with the NIST AI RMF.
Ensure the safeguarding of classified information, CUI, and proprietary data across digital and physical environments.
Lead the enterprise OPSEC program, identifying critical information and implementing protective measures.
Manage insider threat detection, reporting, investigations, and mitigation actions.
Monitor and respond to external threat intelligence.
Conduct security investigations, incident response activities, and corrective actions.
Oversee physical security operations across all facilities, including access control, alarms, CCTV, guard services, and visitor management.
Manage secure areas (SCIFs/SAPFs, closed areas) and associated accreditation requirements.
Lead emergency preparedness, workplace violence prevention, and business continuity/crisis response efforts.
Develop and deliver enterprise-wide security training and awareness programs.
Manage security personnel, contractors, budgets, audits, and self-inspections.
Promote a company-wide culture of proactive security and compliance.