Information System Security Manager (ISSM)

Occam Solutions, Inc.; Arlington (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

Occam Solutions, Inc. is seeking an experienced Information System Security Manager (ISSM) to oversee cybersecurity governance, risk management, and compliance for U.S. Army information systems.

The role focuses on RMF execution, ATO activities, vulnerability management, and alignment with DoD and NIST requirements. Ideal candidates will have strong leadership, DoD program experience, and the ability to coordinate with government stakeholders, system owners, and cybersecurity teams in an onsite

Qualifications

• 5+ years in cybersecurity or information assurance
• Active Secret security clearance
• Strong knowledge of RMF, NIST SP 800-53, and ATO lifecycle
• Experience leading security governance and risk management
• Experience supervising ISSOs or coordinating multi-team security
• Excellent written and verbal communication for exec updates and audits

Responsibilities

• Lead RMF implementation and continuous monitoring across systems
• Manage ATO processes and security authorization packages
• Supervise ISSOs and coordinate security activities across teams
• Oversee vulnerability assessments, security control evaluations, and POA&M governance
• Ensure compliance with NIST SP 800-53 and DoD security requirements
• Develop security policies, procedures, and risk mitigation strategies
• Prepare risk assessments, executive briefings, and compliance reports
• Support audits, security assessments, and incident response coordination

Skills

RMF knowledge

Risk management

Leadership

Executive communication

Education

Bachelor's degree in Cybersecurity/IT/CS/Engineering

DoD 8140 certs (e.g., CISSP)

Tools

Vulnerability scanning tools

STIG validation

Job description

Information System Security Manager (ISSM)

Program: U.S. Army ASA(ALT) – TGL 45
Position ID: DE-0002
Work Arrangement: Onsite 3–5 days per week
Clearance: Active Secret required

Position Overview

We are seeking an experienced Information System Security Manager (ISSM) to oversee cybersecurity governance, risk management, and compliance activities supporting critical U.S. Army information systems. The ISSM will lead Risk Management Framework (RMF) execution, manage Authority to Operate (ATO) activities, oversee vulnerability management, and ensure compliance with Department of Defense (DoD) and NIST cybersecurity requirements.

This position requires strong technical expertise, leadership capabilities, and experience working with government stakeholders, system owners, and cybersecurity teams.

Key Responsibilities

• Lead RMF implementation and continuous monitoring activities across assigned systems.
• Manage ATO processes, security authorization packages, and compliance documentation.
• Supervise and mentor Information System Security Officers (ISSOs).
• Oversee vulnerability assessments, security control evaluations, and remediation activities.
• Manage Plans of Action and Milestones (POA&Ms).
• Ensure compliance with NIST SP 800-53 and applicable DoD security requirements.
• Coordinate with Authorizing Officials, system owners, engineers, and program leadership.
• Develop security policies, procedures, and risk mitigation strategies.
• Prepare cybersecurity risk assessments, executive briefings, and compliance reports.
• Support audits, security assessments, and incident response coordination.

Required Qualifications

• 5+ years of cybersecurity or information assurance experience.
• Active Secret security clearance.
• Strong knowledge of NIST SP 800-53, RMF, and ATO lifecycle processes.
• Experience leading security governance, compliance, and risk management efforts.
• Experience supervising ISSOs or coordinating security activities across multiple technical teams.
• Strong communication skills for executive updates, audit support, and risk briefings.
• Familiarity with vulnerability scanning tools, STIG validation, POA&M governance, and security documentation.

Preferred Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field.
• Relevant DoD 8140 certifications, such as CISSP.
• Prior team leadership or security oversight experience.
• Experience supporting DoD or federal cybersecurity programs.
• Ability to operate effectively in fast-paced, compliance-driven environments.
• Strong judgment in evaluating cyber risk and balancing mission requirements.
• Detail-oriented approach to cybersecurity documentation and monitoring.