Information Security Manager — Risk & Authorization Lead

LMI Government Consulting; Northern (KY); Hybrid; USD 110,000 - 180,000; Full time

Job summary

LMI Government Consulting seeks an experienced Information System Security Manager (ISSM) to lead security authorization and continuous monitoring for enterprise IT in a fast-paced prototype program. You will coordinate with system owners, engineers, and government stakeholders to ensure compliance with NIST and CNSSI controls across multiple enclaves.

Location is Washington, DC metro with 25–50% travel, immediate availability preferred.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field.
• 8+ years of cybersecurity, information assurance, security authorization, or Risk Management Framework experience, including in classified environments.
• Experience leading security authorization for complex enterprise, interconnected, or multi-enclave systems.
• Strong knowledge of NIST SP 800-37, NIST SP 800-53, CNSSI 1253, and federal, defense, or intelligence security requirements.
• Experience developing or reviewing system security plans, control evidence, assessments, plans of action and milestones, authorization packages, and monitoring deliverables.
• Experience supporting SCIF or other accredited classified environments and advising system owners and program leaders on cybersecurity risk.

Responsibilities

• Lead Risk Management Framework implementation across the system lifecycle, including categorization, control selection and tailoring, implementation, assessment, authorization, and continuous monitoring.
• Develop security authorization strategies and roadmaps for classified and unclassified systems, multi-enclave environments, and interconnected capabilities.
• Coordinate system security plans, implementation evidence, plans of action and milestones, assessment packages, authorization decisions, and monitoring artifacts.
• Interpret and apply NIST SP 800-37, NIST SP 800-53, CNSSI 1253, defense and intelligence guidance, customer policies, and program requirements.
• Advise the Lead Cybersecurity Integrator, system owners, the Chief Engineer, program leadership, and technical teams on cyber risk, control gaps, remediation priorities, and risk acceptance.
• Integrate security requirements into architecture, engineering, acquisition, change management, testing, deployment, operations, and sustainment.
• Oversee vulnerability, configuration, and compliance monitoring; prioritize remediation based on exploitability, mission impact, exposure, and operational consequence.
• Coordinate assessors, authorizing officials, security officers, engineers, operators, and stakeholders through reviews, audits, incidents, and authorization milestones.
• Automate evidence collection, control validation, reporting, plan-of-action tracking, and monitoring while preserving auditability and human oversight.

Skills

Risk Management Framework

Security authorization

Stakeholder coordination

Security assessment & monitoring

Security writing & briefings

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field

Tools

SCIF environments

POA&M tooling

Vulnerability management tooling

Continuous monitoring tools

Job description

LMI Government Consulting seeks an experienced Information System Security Manager (ISSM) to lead security authorization and continuous monitoring for enterprise IT in a fast-paced prototype program. You will coordinate with system owners, engineers, and government stakeholders to ensure compliance with NIST and CNSSI controls across multiple enclaves.

Location is Washington, DC metro with 25–50% travel, immediate availability preferred.