Information System Security Manager (ISSM)

Occam Solutions, Inc; Arlington (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

Occam Solutions, Inc in Arlington, VA seeks an experienced Information System Security Manager (ISSM) to lead RMF, ATO, and DoD/NIST compliance across critical Army information systems. The role requires an Active Secret clearance, strong leadership, and collaboration with government stakeholders to implement security controls, coordinate audits, and drive risk reduction.

You will mentor ISSOs, oversee vulnerability assessments, and ensure continuous monitoring, reporting to program leadership,

Qualifications

• 5+ years in cybersecurity or information assurance.
• Active Secret clearance required.
• Strong knowledge of NIST SP 800-53, RMF, and ATO lifecycle processes.
• Experience leading governance, compliance, and risk management efforts.
• Experience supervising ISSOs or coordinating security activities across multiple technical teams.
• Strong communication skills for executive updates, audit support, and risk briefings.
• Familiarity with vulnerability scanning tools, STIG validation, POA&M governance, and security documentation.

Responsibilities

• Lead RMF implementation and continuous monitoring activities across assigned systems.
• Manage ATO processes, security authorization packages, and compliance documentation.
• Supervise and mentor Information System Security Officers (ISSOs).
• Oversee vulnerability assessments, security control evaluations, and remediation activities.
• Manage Plans of Action and Milestones (POA&Ms).
• Ensure compliance with NIST SP 800-53 and applicable DoD security requirements.
• Coordinate with Authorizing Officials, system owners, engineers, and program leadership.
• Develop security policies, procedures, and risk mitigation strategies.
• Prepare cybersecurity risk assessments, executive briefings, and compliance reports.
• Support audits, security assessments, and incident response coordination.

Skills

Cybersecurity

RMF / DoD

Security governance

Team leadership

Communication

Vulnerability tools

Documentation

Education

Bachelor's degree

Tools

Vulnerability scanners

STIG validation

POA&M governance

Job description

Information System Security Manager (ISSM)

Arlington, Virginia

Full-Time

Program: U.S. Army ASA(ALT) – TGL 45

Position ID: DE-0002

Work Arrangement: Onsite 3–5 days per week

Clearance: Active Secret required

Position Overview

We are seeking an experienced Information System Security Manager (ISSM) to oversee cybersecurity governance, risk management, and compliance activities supporting critical U.S. Army information systems. The ISSM will lead Risk Management Framework (RMF) execution, manage Authority to Operate (ATO) activities, oversee vulnerability management, and ensure compliance with Department of Defense (DoD) and NIST cybersecurity requirements.

This position requires strong technical expertise, leadership capabilities, and experience working with government stakeholders, system owners, and cybersecurity teams.

Key Responsibilities

• Lead RMF implementation and continuous monitoring activities across assigned systems.
• Manage ATO processes, security authorization packages, and compliance documentation.
• Supervise and mentor Information System Security Officers (ISSOs).
• Oversee vulnerability assessments, security control evaluations, and remediation activities.
• Manage Plans of Action and Milestones (POA&Ms).
• Ensure compliance with NIST SP 800-53 and applicable DoD security requirements.
• Coordinate with Authorizing Officials, system owners, engineers, and program leadership.
• Develop security policies, procedures, and risk mitigation strategies.
• Prepare cybersecurity risk assessments, executive briefings, and compliance reports.
• Support audits, security assessments, and incident response coordination.

Required Qualifications

• 5+ years of cybersecurity or information assurance experience.
• Active Secret security clearance.
• Strong knowledge of NIST SP 800-53, RMF, and ATO lifecycle processes.
• Experience leading security governance, compliance, and risk management efforts.
• Experience supervising ISSOs or coordinating security activities across multiple technical teams.
• Strong communication skills for executive updates, audit support, and risk briefings.
• Familiarity with vulnerability scanning tools, STIG validation, POA&M governance, and security documentation.

Preferred Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field.
• Relevant DoD 8140 certifications, such as CISSP.
• Prior team leadership or security oversight experience.
• Experience supporting DoD or federal cybersecurity programs.
• Ability to operate effectively in fast-paced, compliance-driven environments.
• Strong judgment in evaluating cyber risk and balancing mission requirements.
• Detail-oriented approach to cybersecurity documentation and monitoring.