Information Security Manager - RMF, ATO & DoD Compliance

Occam Solutions, Inc.; Arlington (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

Occam Solutions, Inc. is seeking an experienced Information System Security Manager (ISSM) to oversee cybersecurity governance, risk management, and compliance for U.S. Army information systems.

The role focuses on RMF execution, ATO activities, vulnerability management, and alignment with DoD and NIST requirements. Ideal candidates will have strong leadership, DoD program experience, and the ability to coordinate with government stakeholders, system owners, and cybersecurity teams in an onsite

Qualifications

• 5+ years in cybersecurity or information assurance
• Active Secret security clearance
• Strong knowledge of RMF, NIST SP 800-53, and ATO lifecycle
• Experience leading security governance and risk management
• Experience supervising ISSOs or coordinating multi-team security
• Excellent written and verbal communication for exec updates and audits

Responsibilities

• Lead RMF implementation and continuous monitoring across systems
• Manage ATO processes and security authorization packages
• Supervise ISSOs and coordinate security activities across teams
• Oversee vulnerability assessments, security control evaluations, and POA&M governance
• Ensure compliance with NIST SP 800-53 and DoD security requirements
• Develop security policies, procedures, and risk mitigation strategies
• Prepare risk assessments, executive briefings, and compliance reports
• Support audits, security assessments, and incident response coordination

Skills

RMF knowledge

Risk management

Leadership

Executive communication

Education

Bachelor's degree in Cybersecurity/IT/CS/Engineering

DoD 8140 certs (e.g., CISSP)

Tools

Vulnerability scanning tools

STIG validation

Job description

Occam Solutions, Inc. is seeking an experienced Information System Security Manager (ISSM) to oversee cybersecurity governance, risk management, and compliance for U.S. Army information systems.

The role focuses on RMF execution, ATO activities, vulnerability management, and alignment with DoD and NIST requirements. Ideal candidates will have strong leadership, DoD program experience, and the ability to coordinate with government stakeholders, system owners, and cybersecurity teams in an onsite