Cleared Information System Security Manager (ISSM) - L4

Virtual Service Operations; Lorton (VA); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Health benefits

Flexible work arrangements

Job summary

Virtual Service Operations seeks an experienced Information System Security Manager (ISSM) to lead the security program for edge environments in Lorton, VA. You will manage the RMF lifecycle, oversee ISSOs, and coordinate with CM, risk assessment, and incident response teams.

Required are 5+ years in information security management, 8+ years in related tech, and an active TS/SCI clearance for DoD-style environments. Onsite work and 25% travel are expected.

Qualifications

• Bachelor's degree in Computer Science, Engineering, Finance, Business, or related field OR equivalent experience.
• 8+ years of demonstrated performance in related technology.
• 5+ years of experience in information security management.
• 5+ years of SCI/SAP environments with active TS/SCI clearance.
• Strong knowledge of security standards and regulations (ISO 27001, NIST, HIPAA).
• Experience with security tools and technologies (firewalls, IDS/IPS, SIEM).
• Excellent communication and leadership skills.

Responsibilities

• Develop and maintain a formal IS security program and policies for the Edge environment.
• Develop and implement information security policies and procedures; oversee IS security implementation guidelines.
• Coordinate with the PSO or cognizant security official on external information systems approvals.
• Ensure ISSOs under your purview are appointed in writing and cover duties in their absence.
• Conduct risk assessments and vulnerability testing; ensure periodic security posture testing.
• Monitor and respond to security incidents and threats.
• Maintain a repository of cybersecurity documentation, including ATOs.
• Coordinate IS security inspections, tests, and reviews; manage audits and assessments.
• Ensure CM policies are followed for hardware/software changes; coordinate with AO.
• Serve as a voting member of CCB/REO with authority to veto changes for security.
• Manage, maintain, and execute the information security continuous monitoring plan.
• Maintain records of security vulnerabilities and report serious issues to AO/DAO.
• Develop and deliver security awareness training to employees.
• Maintain relationships with ISO, AO, SCA, and other ISSMs; guide cybersecurity teammates.

Skills

Leadership

NIST/ISO27001

SCI/SAP

Security policy

Communication

Vulnerability testing

Incident response

Threat monitoring

Education

Bachelor's degree

Active TS/SCI clearance

Tools

Firewalls

IDS/IPS

SIEM

Job description

Cleared Information System Security Manager (ISSM) - L4

Lorton, VA with some travel

Are you looking to take the next steps in your career as an Information System Security Manager (ISSM) — Level 4? Let's chat and see if we are a good match!

Virtual Service Operations is searching for an Information System Security Manager (ISSM) to join our dynamic team of experts in Lorton, VA. In this role, you will oversee the security of program information systems, ensuring compliance with industry standards and regulations while developing and implementing security policies and procedures. You'll manage the Risk Management Framework lifecycle, oversee ISSOs under your purview, and serve as a key point of coordination across configuration management, risk assessment, and incident response activities. Candidates should bring strong leadership, deep familiarity with security standards such as NIST and ISO 27001, and a background managing information security in classified DoD environments.

Key Responsibilities:

• Develop and maintain a formal IS security program and policies for the Edge environment.
• Develop and implement information security policies and procedures, and oversee operational IS security implementation guidelines.
• Coordinate with the PSO or cognizant security official on approval of external information systems.
• Ensure ISSOs under your purview are appointed in writing and follow established IS policies and procedures; assume ISSO responsibilities in their absence.
• Conduct risk assessments and vulnerability testing, and ensure periodic security posture testing is performed using intrusion/attack detection and monitoring tools.
• Monitor and respond to security incidents and threats.
• Maintain a repository of all organizational- and system-level cybersecurity documentation, including ATOs.
• Coordinate IS security inspections, tests, and reviews, and manage security audits and assessments.
• Ensure configuration management policies are followed for all hardware/software changes, coordinating with the appropriate AO prior to implementation.
• Serve as a voting member of the Configuration Control Board (CCB) and/or Risk Executive Board, with authority to veto changes deemed detrimental to security.
• Manage, maintain, and execute the information security continuous monitoring plan.
• Ensure a record of all security-related vulnerabilities is maintained, and report serious or unresolved violations to the AO/DAO.
• Develop and deliver security awareness training to employees.
• Maintain working relationships with the ISO, AO, SCA, and other ISSMs, and provide guidance to cybersecurity teammates.

Required Qualifications:

• Bachelor's degree in Computer Science, Engineering, Finance, Business, or a related field AND 3+ years of leadership experience in a relevant area of business, OR equivalent experience.
• 8+ years of demonstrated performance in related technology.
• 5+ years of experience in information security management.
• 5+ years of related experience in SCI/SAP environments.Active TS/SCI security clearance.
• Strong knowledge of security standards and regulations (e.g., ISO 27001, NIST, HIPAA).
• Experience with security tools and technologies (e.g., firewalls, intrusion detection/prevention systems, SIEM).
• Excellent communication and leadership skills.

Preferred Qualifications:

• 5+ years of leadership experience in a relevant area of business.
• Technical certifications in Azure.
• DoD IAT Level III Certification (CISSP or CASP).

Requirements

• Must be within driving distance of Lorton, VA OR willing to relocate there (relocation packages available)
• Must be willing to work onsite
• Strong written and verbal communication skills with excellent attention to detail and documentation accuracy.
• Ability to work independently and collaboratively in a mission-focused environment.
• Must be willing and able to travel up to 25%.
• Must possess an active TS/ SCI clearance or above
• Please note that pursuant to a government contract, this specific position requires U.S. citizenship status

What is Important to Us:

• You are an excellent communicator in writing and speaking.
• You have the ability to work independently but also value teamwork.
• Your problem-solving skills are excellent.
• You are looking for a job where performance appraisals occur regularly, and you look forward to advancing your career.
• You seek a community of virtue-centered co-workers and clients.

What we offer you:

As part of the VSO company, you will be part of a virtue-centered team who value their work and teammates. This is a no-jerk zone. We provide ongoing learning and development opportunities to foster continuous growth. We offer competitive salaries, health benefits, and flexible work arrangements.

More About VSO:

VSO is a hybrid cloud and managed services consulting firm. Much of VSO’s success can be attributed to our deep partnerships with IT services industry leaders such as AWS, IBM, Microsoft and others. VSO leverages numerous other partner relationships so as to provide our customers with optimal support. Additionally, we take pride in taking care of our employees. We offer a wide variety of benefits for eligible employees related to health, retirement, professional development, and more! For more information, please visit our website at https://vso-inc.com/careers