Information System Security Manager

Amentum; Sumter (SC); On-site; USD 100,000 - 110,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Educational reimbursement

Parental leave

Employee stock purchase plan

Disability and life insurance

Pet insurance

Job summary

Amentum seeks an Information Systems Security Manager to lead the security posture of contractor-managed information systems within the 25th Attack Group. You will own RMF packages, develop SSPs, and coordinate with AOs/SCAs to secure and renew ATOs, while guiding ISSOs in implementing controls across enclaves.

The role emphasizes system-level governance, continuous monitoring, and compliance with DoDI 8510.01, AFI 17-101, and related standards, with a focus on ensuring mission-aligned

Qualifications

• BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, Computer Science, or equivalent from ABET/CAE institution.
• Active TS/SCI eligibility and US Citizenship required.
• Active DoD 8140 / DoDI 8570.01-M IAM Level II or III certification matching ISSM responsibilities.
• Minimum 3–5 years in RMF package development, continuous monitoring, and ISSM/lead ISSO roles.

Responsibilities

• Serve as ISSM for up to four contractor-managed information systems, overseeing RMF compliance and ATO processes.
• Develop and maintain System Security Plans (SSPs), risk assessments, and continuous monitoring plans.
• Interface with Government AOs and SCAs to present risk assessments and manage POA&Ms and ATO renewals.
• Oversee vulnerability management, incident reporting, access control governance, and configuration management.
• Provide guidance to ISSOs to ensure security control implementation aligns with baselines and mission needs.
• Provide contingency continuity support for tactical enclave cybersecurity as needed.
• Report changes affecting authorization status to Government leadership.
• Initiate exceptions or waivers to cybersecurity requirements with proper documentation.

Skills

RMF package development

Continuous monitoring

ISSM responsibilities

eMASS

Xacta

POAMs

Vulnerability management

Configuration management

Senior government leadership briefing

DoD 8140 knowledge

TS/SCI eligibility

Education

ABET-accredited or CAE-designated degree in IT/Cybersecurity/Info Systems

Master's degree in Cybersecurity (preferred)

Tools

eMASS

Xacta

STIGs/SCAP

ACAS/Nessus

IAM Level II/III Certification

Job description

The ISSM provides dedicated strategic cybersecurity leadership and oversight for designated classified information system enclaves supporting the 25th Attack Group (25 ATKW). Unlike a hybrid or tactical operations role, this position focuses exclusively on system-level cybersecurity governance, Risk Management Framework (RMF) compliance, and continuous monitoring to achieve and maintain Authorizations to Operate (ATO). The ISSM serves as the primary cybersecurity technical advisor to the Government Authorizing Official (AO), Program Manager (PM), and Information System Owner (ISO).

Essential Responsibilities:

• Serve as the formally appointed Information Systems Security Manager (ISSM) for up to four contractor-managed Information Systems (including RPA Low, ACN, Audio MLS, and RPA High), overseeing the full lifecycle of cybersecurity compliance and system accreditation in accordance with DoDI 8510.01, AFI 17-101 (RMF), and AFMAN 17-1301 (COMPUSEC).
• Develop, maintain, and oversee authorization documentation, System Security Plans (SSPs), risk assessments, and continuous monitoring activities using both eMASS and Xacta workflow platforms.
• Act as the primary interface with Government Authorizing Officials (AOs) and Security Control Assessors (SCAs) to present risk assessments, initiate ATO packages, manage Plan of Action and Milestones (POA&Ms), and secure timely renewals.
• Maintain rigorous oversight of vulnerability management, incident reporting, access control governance, and configuration management functions across assigned enclaves.
• Provide oversight and guidance to subordinate cybersecurity personnel (ISSOs) to ensure security control implementation and mitigation efforts align with established baselines and mission requirements.
• Provide contingency continuity support for tactical enclave cybersecurity (ISSO) activities during periods of workforce shortfalls or as critical mission needs dictate.
• Report conditions that materially affect system authorization status or cybersecurity posture directly to the Government, translating technical risk into actionable mission risk.
• Initiate exceptions, deviations, or waivers to cybersecurity requirements when operational impacts dictate, ensuring complete documentation and coordination with the AO.
• Ensure all assigned personnel and systems remain compliant with applicable DoW/DoD 8140 cybersecurity workforce requirements.

Minimum Qualifications:

• A BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, Computer Science, or equivalently relative discipline, from an ABET accredited or CAE designated institution.
• Must have an active Top-Secret clearance with Sensitive Compartmented Information (TS/SCI) eligibility. US Citizenship is required.
• Active DoD 8140 / DoDI 8570.01-M IAM Level II or III Certification matched to ISSM responsibilities prior to hiring.
• Minimum 3-5 years of dedicated experience in RMF package development, continuous monitoring, and acting as an ISSM or lead ISSO.
• Demonstrated proficiency in navigating and managing ATO packages within both eMASS and Xacta. Experience with STIGs, SCAP, vulnerability scanning, and ACAS/NESSUS.
• Knowledge of cybersecurity laws, regulations, policies, governance, and technical safeguards governing the use, processing, storage, and transmission of classified information.
• Exceptional communication skills, with the ability to confidently brief senior government leadership (AOs, SCAs, PMs) on cyber risk posture.
• Must possess and maintain a valid state-issued driver’s license.

Preferred Qualifications:

• Master’s degree in a Cybersecurity or related field.
• Experience with DODM 5205.07 Risk Management Framework, and familiarity with RPA SOC/C4 ISR mission system.

Work Environment, Physical Demands, and Mental Demands:

Typical office environment with no unusual hazards, occasional lifting of 20 pounds, kneeling, standing, and walking, routinely sitting and constant use of speech/hearing abilities for communication, constant mental alertness, and must be able to work under deadlines.

Compensation Details:

$100,000 - $110,000

The compensation range or hourly rate listed for this position is provided as a good-faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws.

Benefits Overview:

Our health and welfare benefits are designed to support you and your priorities. Offerings include:

• Health, dental, and vision insurance
• Paid time off and holidays
• Retirement benefits (including 401(k) matching)
• Educational reimbursement
• Parental leave
• Employee stock purchase plan
• Tax-saving options
• Disability and life insurance
• Pet insurance

Note: Benefits may vary based on employment type, location, and applicable agreements. Positions governed by a Collective Bargaining Agreement (CBA), the McNamara-O’Hara Service Contract Act (SCA), or other employment contracts may include different provisions/benefits.

Original Posting:

08/21/2026 - Until Filled

Amentum anticipates this job requisition will remain open for at least three days, with a closing date no earlier than three days after the original posting. This timeline may change based on business needs.

Amentum is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, sex, sexual orientation, pregnancy (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, ancestry, United States military or veteran status, color, religion, creed, marital or domestic partner status, medical condition, genetic information, national origin, citizenship status, low-income status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law. Learn more about your rights under Federal laws and supplemental language at Labor Laws Posters.