Information Systems Security Manager (ISSM)

Foxtrot Division; Barcelona; Híbrido; EUR 80.000 - 110.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Competitive salary

Monthly reimbursement for cell phone and Internet

Yearly training budget

Top-tier medical, dental, and vision insurance

Generous PTO policy

Parental leave

Cash awards

Sponsored events

Descripción de la vacante

Medium's Foxtrot Division seeks an Information Systems Security Manager to oversee security, compliance, and risk management of enterprise information systems. This senior role involves leading cybersecurity strategies and ensuring compliance with federal requirements.

The ideal candidate will have a strong background in cybersecurity management, with over 10 years of experience, including 5 in a leadership position. This position offers a competitive salary, comprehensive benefits, and opportunities for professional growth.

Formación

• 10+ years of experience in Cybersecurity or Risk Management.
• 5+ years in a leadership role.
• CISSP certification required.

Responsabilidades

• Oversee information systems security and compliance.
• Lead cybersecurity strategy and RMF activities.
• Manage vulnerability remediation and continuous monitoring.

Conocimientos

Cybersecurity management

Risk Management Framework (RMF)

Information Assurance (IA)

Continuous monitoring

Vulnerability management

Team leadership

Educación

Bachelor's degree in Cybersecurity or related field

Master's degree preferred

Herramientas

eMASS

Descripción del empleo

Foxtrot Division is positioned at the forefront of cyber systems engineering, driven by a mission to create secure systems that empower our clients to excel in their endeavors. At the heart of our success are our people—our dedicated engineers and team members—whose expertise, creativity, and passion are the bedrock of our success. We understand that our strength lies in the collective spirit and the unique talents of our team, which is why we deeply value and invest in their growth and well-being. Our mission is rooted in transcending the ordinary, a force that unites us and propels us forward. We are not content with business as usual; we are the rockstars of our industry, challenging the status quo, and setting the pace for innovation and excellence. Our DNA-thinking deeply, speaking boldly, leading by example, and striving to be great—defines us and our approach to everything we do. At Foxtrot Division, we are committed to leading the way, ensuring that our products, services, and team members are aligned with our core purpose. Through this alignment, we aim to leave a lasting, positive impact on the world, driving us further and faster towards our vision of excellence, with our people leading the charge.

The Information Systems Security Manager (ISSM) serves as the senior cybersecurity leader responsible for overseeing and maintaining the security, compliance, and risk management of enterprise information systems. This role leads cybersecurity strategy, Risk Management Framework (RMF) activities, continuous monitoring, vulnerability management, and authorization efforts while ensuring compliance with federal and DoD cybersecurity requirements. The ISSM works closely with executive leadership, system owners, and security teams to protect organizational assets, manage cybersecurity risks, and maintain secure, authorized operations across the enterprise.

Key Responsibilities

• Serve as the senior cybersecurity authority and subject matter expert (SME) responsible for the organization's Information Assurance (IA) and Cybersecurity Program.
• Lead the planning, implementation, governance, and continuous improvement of cybersecurity policies, standards, procedures, and best practices across the enterprise.
• Direct and oversee Risk Management Framework (RMF) activities throughout the system lifecycle, ensuring systems achieve and maintain Authority to Operate (ATO), Interim Authority to Operate (IATO), or Authorization to Connect (ATC) status.
• Provide strategic leadership for cybersecurity risk management, continuous monitoring, compliance, and security modernization initiatives.
• Review, approve, and maintain cybersecurity authorization artifacts, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), Security Control Traceability Matrices (SCTMs), and contingency planning documentation.
• Serve as the primary liaison between Authorizing Officials (AOs), Information System Owners (ISOs), Information System Security Officers (ISSOs), system administrators, executive leadership, and external cybersecurity stakeholders.
• Lead enterprise vulnerability management, remediation efforts, and security assessment activities to identify, prioritize, and mitigate cybersecurity risks.
• Oversee continuous monitoring programs, security control effectiveness assessments, penetration testing reviews, audit response activities, and compliance reporting.
• Develop and present executive-level cybersecurity metrics, risk assessments, and compliance status reports to support informed decision-making.
• Coordinate cybersecurity inspections, audits, and assessments, ensuring timely remediation of findings from Security Control Assessors (SCAs), Inspector General (IG), Government Accountability Office (GAO), and other oversight organizations.
• Provide leadership and oversight during cybersecurity incidents, coordinating response efforts, risk mitigation strategies, and post-incident corrective actions.
• Supervise, mentor, and provide technical guidance to ISSOs, cybersecurity analysts, and security personnel while fostering a culture of security awareness and accountability.
• Develop and manage cybersecurity awareness, role-based training, and workforce development programs to enhance organizational cybersecurity maturity.
• Support cybersecurity budget planning, resource management, acquisition activities, and evaluation of emerging security technologies to strengthen organizational security posture.
• Advise senior leadership on cybersecurity strategy, emerging threats, organizational risk exposure, and regulatory compliance requirements to ensure secure and mission-aligned operations.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field (Master's degree preferred).
• 10+ years of experience in Information Assurance, Cybersecurity, Information Security, or Risk Management, including at least 5 years in a leadership or management role.
• Experience managing NIST Risk Management Framework (RMF) activities, system authorization efforts, and cybersecurity compliance programs.
• Experience supporting federal government, Department of Defense (DoD), Intelligence Community (IC), or other regulated cybersecurity environments.
• Strong knowledge of NIST RMF, NIST SP 800-53, FISMA, and related federal cybersecurity requirements.
• Experience with continuous monitoring, vulnerability management, risk assessment, and security compliance activities.
• CISSP certification required; CISM, CAP, or GSLC certifications are a plus.
• Experience with eMASS or similar authorization management platforms preferred.
• Active DoD Secret security clearance required (DoD Top Secret/SCI eligibility preferred).
• U.S. Citizenship.

Benefits and Perks

• Competitive salary, paid biweekly.
• $100 monthly reimbursement for cell phone and Internet.
• $3000 yearly training budget.
• Top-tier medical, dental, and vision insurance coverage.
• Medical, dental, and vision insurance premiums covered 100% by Foxtrot Division.
• Generous PTO policy with 15 days of annual leave and 11 paid holidays.
• Parental leave.
• On-the-spot cash awards.
• Foxtrot Division sponsored events and activities.