Information System Security Manager (ISSM)

Applied-Research-Associates,-Inc; Albuquerque (NM); On-site; USD 130,000 - 150,000; Full time

Job summary

Applied Research Associates, Inc. in Albuquerque, NM seeks an Information Systems Security Manager (ISSM) to implement and oversee the RMF-based security program for a cleared facility. The ISSM will coordinate with DCSA, ISSOs, and IT staff to ensure compliant security controls and ongoing authorization.

Responsibilities include developing SSPs, managing RMF packages in eMASS, and delivering role-based training. A TS clearance with SCI eligibility is required or can be obtained.

Qualifications

• Bachelor’s degree or equivalent in cybersecurity, CS, or IT.
• Active Top Secret clearance with SCI eligibility.
• 5–7 years in information system security, 2+ in ISSM/ISSO roles.
• Experience with 32 CFR Part 117, DAAG, NIST SPs.
• Experience with A&A lifecycle for classified systems.

Responsibilities

• Implement and manage the classified information system security program per federal guidelines.
• Maintain relationships with DCSA ISSPs and respond to findings.
• Develop SSPs, security control assessments, and authorization packages.
• Manage RMF lifecycle for facility classified systems.
• Complete RMF packages in eMASS within timelines.
• Supervise site-level ISSOs and support staff.
• Conduct security control assessments and continuous monitoring.
• Coordinate incident reporting through FSO and government agencies.
• Deliver annual role-based training for users and admins.
• Provide guidance on configuration, hardening, patching, maintenance.

Skills

Security+

Security expertise

NIST SP 800-series

RMF knowledge

Threat and risk management

Education

Bachelor’s degree in cybersecurity, CS, IT, or related field

Tools

eMASS

STIG Viewer/SCAP

SIEM/Auditing tools

Job description

If you are a job seeker with a disability and require a reasonable accommodation to apply for one of our jobs, you will find the contact information to request the appropriate accommodation by visiting the following our Accessibility Accomodation for Applicants page.

Information System Security Manager (ISSM)

• Posted on October 14, 2026

Locations

Showing 1 location

Albuquerque, NM 87110, USA

• On-site
• Information Technology
• Full-Time
• Requisition #: INFOR010158

Description

The Defense Technology Solutions Division of Applied Research Associates, Inc. (ARA) is seeking a person to fill the position of an Information Systems Security Manager (ISSM) to join our team in Albuquerque, NM. The Information System Security Manager (ISSM) is responsible for the implementation, management, and day-to-day oversight of the classified information system security program at a specific cleared facility location. Appointed per 32 CFR Part 117 §117.7(b)(5), the ISSM ensures all classified information systems at the facility operate in compliance with the NISPOM Rule, the DCSA Assessment and Authorization Guide (DAAG), NIST SP 800-53, CNSSI 1253, and all applicable CSA cybersecurity requirements.

The ISSM is primarily responsible for the implementation of the risk management framework (RMF). The ISSM serves as the principal advisor on all matters, technical and otherwise, involving the security of systems under their purview. This role requires close coordination with the facility FSO, the Insider Threat Program Senior Official (ITPSO), Information System Security Officers (ISSOs), DCSA Information Systems Security Professionals (ISSPs), and facility IT support staff.

Essential Functions

• Implement and manage the classified information system security program at the division/branch facility in accordance with 32 CFR Part 117 §117.18 and the DAAG.
• Maintain a productive working relationship with DCSA ISSPs and respond promptly to assessment findings and information requests.
• Develop, maintain, and submit System Security Plans (SSPs), security control assessments, and authorization packages for all classified systems at the facility.
• Manage the full RMF lifecycle of facility classified systems ensuring they operate within the parameters of their DCSA-approved security plans
• Complete RMF packages within DCSA timelines for authorization, reauthorization, extension, and decommission workflows within eMASS to ensure operation continuity
• Supervise site-level ISSOs and any support staff performing NISP-related security functions at the facility.
• Conduct regular security control assessments, continuous monitoring and self-inspections of classified information systems
• Manage the facility’s Plan of Action and Milestones (POA&M) for classified systems, tracking open findings to timely resolution.
• Evaluate and ensure compliance with configuration management and change control processes for all system modifications prior to implementation.
• Serve as the facility-level lead for classified information system security incidents coordinating all external reporting through the FSO and corporate security.
• Develop and deliver annual role-based training for all users and administrators of classified information systems at the facility
• Provide technical guidance for controls on the configuration, hardening, patching, and maintenance of classified systems, networks, and enclaves at the facility.
• Help oversee the sanitization and destruction of classified media and equipment at the facility per NSA/CSS guidelines
• Participate in corporate ISSM working groups and internal security reviews.
• Support the FSO during DCSA security reviews by providing classified IS documentation, evidence of compliance, and technical briefings.

Education

Bachelor’s degree in cybersecurity, computer science, information technology, or a related field. Equivalent combination of education and directly related experience will be considered.

Experience and Skills Required

• Security+
• Minimum 5-7 years of experience in information system security, with at least 2 years in an ISSM, ISSO, or equivalent role supporting classified information systems.
• Demonstrated working knowledge of 32 CFR Part 117 §117.18, the DCSA Assessment and Authorization Guide (DAAG), and NIST 800-series publications.
• Experience managing the A&A lifecycle for classified information systems under DCSA cognizance
• Active Top Secret clearance with SCI eligibility (or ability to obtain) or clearance commensurate with the highest classification level processed on facility systems.
• Strong technical knowledge of Windows and/or Linux security hardening, STIG application, network security fundamentals, and audit log management.
• Experience with classified system configuration management, media control, and sanitization/destruction procedures.

Core Competencies

• Technical understanding of classified system security controls, network architecture, and risk management
• Knowledge of NISPOM and related CFRs, DAAG, NIST SPs, CNSSI directives.
• Analytical thinking, technical writing, and the ability to produce clear security documentation (SSPs, POA&Ms, incident reports).
• Incident response leadership, including digital evidence preservation and coordination with the FSO, ITPSO, and government agencies.
• Effective collaboration with the FSO, ITPSO, IT staff, program managers, and DCSA ISSPs.
• Discretion and integrity in handling classified information and sensitive cybersecurity data.
• Commitment to continuous professional development and staying current with evolving cybersecurity threats and DCSA guidance.
• Manage individuals and work in a small team to complete projects on set deadlines.

Preferred

• DoD 8570.01-M / DoD 8140 compliant certification at the IAM Level II or higher (e.g., CISSP, CISM, CAP, or CASP+).
• Prior industry ISSM, ISSO, or cybersecurity assessor experience (DCSA, NSA, or IC).
• Knowledge of cross-domain solutions, classified cloud environments (IL4/IL5), and network interconnection security.
• Experience with eMASS or equivalent A&A workflow tools, vulnerability scanners, SIEM/Auditing and STIG Viewer / SCAP compliance tools.

Compensation & Benefits: Pay Range: $130,000 - $150,000per year based on years of experience, degree and any special skills and knowledge that they may bring to the position. ARA offers competitive benefits that address our employees’ needs now and in the future. Learn more about each of our benefits at https://www.ara.com/benefits/

Applied Research Associates, Inc. (ARA) is an employee-owned international research and engineering company recognized for providing technically superior solutions to complex and challenging problems in the physical sciences. The company, founded in Albuquerque, NM in 1979, employs over 2200 professionals and continues to grow. ARA offices throughout the United States and Canada provide a broad range of technical expertise in defense technologies, civil technologies, computer software and simulation, systems analysis, environmental technologies, and testing and measurement.

At ARA, employees are our greatest assets. The corporation realizes that employee ownership spawns’ greater creativity and initiative along with higher performance and customer satisfaction levels. ARA gives its employees the tools, training, opportunities and autonomy to take active roles as employee owners. The culture is challenging; innovation and experimentation are the norm. Employees are expected to advance new capabilities to support company’s success, but also their own through the Employee Stock Ownership Plan (ESOP). The core values “Passion, Freedom, Service and Growth” and the motto, “Engineering and Science for Fun and Profit” sum up the ARA experience. For additional information and an opportunity to join this unique workplace, please visit our website at www.ara.com.

Behaviors

Team Player : Works well as a member of a group

Leader : Inspires teammates to follow them

Detail Oriented : Capable of carrying out a given task with all details necessary to get the task done well

Dedicated : Devoted to a task or purpose with loyalty or integrity

Motivations

Self-Starter : Inspired to perform without outside help

Goal Completion : Inspired to perform well by the completion of tasks

Ability to Make an Impact : Inspired to perform well by the ability to contribute to the success of a project or the organization

Education

Required

Bachelors or better in Cybersecurity or related field.

Experience

Required

5-7 years: Relevant work experience

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.