Information System Security Manager (ISSM)

Lever, Inc.; Colorado Springs (CO); On-site; USD 115,000 - 135,000; Full time

Benefits offered by this job

medical

dental

vision

life insurance

401(k)

PTO

paid holidays

parental

military

jury duty paid leaves

Job summary

Delta Solutions & Strategies, LLC is seeking an experienced Information System Security Manager (ISSM) to govern cybersecurity and compliance for classified information systems. You will lead RMF implementation, system authorization, continuous monitoring, and ensure compliance with DCSA, NISPOM, NIST, and related requirements.

The role communicates with FSO, IT, admins, leadership, and government security personnel to maintain security posture and authorization readiness.

Qualifications

• Experience in supporting cybersecurity for DoD/federal contracting environments.
• Experience developing RMF/SSP documentation and evidence.
• Knowledge of NIST SP 800-53 and 800-171 security controls.
• Experience with eMASS or equivalent government authorization systems.
• Familiarity with DCSA, NISPOM, and related security requirements.

Responsibilities

• Serve as ISSM for Delta's classified information systems.
• Maintain RMF packages and ongoing system security documentation.
• Manage eMASS artifacts, POA&Ms, and continuous monitoring activities.
• Coordinate with DCSA and government personnel on authorization and assessments.
• Ensure security controls are implemented and evidenced (NIST SP 800-53).
• Oversee vulnerability management, patching, and configuration management.
• Maintain System Security Plans, diagrams, inventories, and interconnections.
• Provide status updates to leadership and guidance to users and admins.

Skills

RMF familiarity

NIST SP 800-53

NIST SP 800-171

eMASS experience

CSM/SSP development

RMF authorization documentation

Vulnerability management

Familiarity with GCC High/IL4+

Windows Security Stack

DCSA/NISPOM knowledge

DoD Top Secret clearance

Education

Bachelor's degree in Cybersecurity/IT/CS/IS or related

CISSP or CISM or CASP+/Security+ or equivalent

Tools

eMASS

Active Directory

Microsoft Security Stack

Vulnerability scanners

Job description

Delta Solutions & Strategies, LLC is seeking an experienced Information System Security Manager (ISSM) to manage and oversee the cybersecurity and compliance requirements for Delta's classified information systems.

The ISSM serves as the principal advisor for the security of classified information systems and is responsible for maintaining the overall security posture of systems under their purview. This position leads Risk Management Framework (RMF) implementation, system authorization and continuous monitoring activities, and ensures classified systems remain compliant with applicable DCSA, NISPOM, NIST, and cybersecurity requirements.

The ISSM works closely with Delta's Facility Security Officer (FSO), IT personnel, system administrators, users, company leadership, and government security representatives to ensure classified information systems remain secure, compliant, authorized, and operational.

What you will be doing:

• Serve as the Information System Security Manager (ISSM) for Delta's classified information systems.
• Maintain and manage Risk Management Framework (RMF) authorization packages and ongoing system security documentation.
• Manage eMASS documentation, controls, artifacts, POA&M, continuous monitoring activities, CCIs, and authorization-related submissions.
• Coordinate with DCSA, ISSP, SCA, and other government personnel regarding system authorization, assessments, inspections, system changes, and compliance activities.
• Ensure applicable NIST SP 800-53 security controls are implemented, documented, maintained, and supported with appropriate evidence.
• Manage system changes through applicable RMF and change-management processes and identify when security documentation or authorization updates are required.
• Maintain System Security Plans, procedures, system diagrams, hardware and software inventories, interconnection documentation, and supporting cybersecurity records.
• Oversee vulnerability management, patching, configuration management, audit logging, account management, incident response, and continuous monitoring activities for classified systems.
• Identify, track, and coordinate remediation of cybersecurity vulnerabilities, findings, and deficiencies.
• Maintain POA&M documentation and track corrective actions through completion.
• Support cybersecurity inspections, assessments, authorization activities, and government validation events.
• Coordinate with IT personnel and system administrators to ensure technical changes affecting classified systems comply with applicable security requirements.
• Coordinate with the FSO and security personnel on matters involving classified information systems and cybersecurity compliance.
• Review user and privileged access requirements and ensure access is properly authorized and documented.
• Support cybersecurity incident reporting, investigation, remediation, and required documentation.
• Maintain awareness of applicable DCSA, NISPOM, RMF, NIST, and other cybersecurity requirements.
• Update system documentation and security practices as requirements or system configurations change.
• Provide cybersecurity status, findings, risks, and remediation updates to leadership as requested.
• Provide guidance and training to users and system administrators regarding classified system security requirements.
• Perform other cybersecurity and information system security duties as assigned.

What you will need:

• U.S. citizenship.
• Active DoD Top Secret security clearance.
• Experience supporting cybersecurity, information assurance, or information system security within a classified DoD or federal contracting environment.
• Familiarity with CMMC L2 practices/domains, and evidence collection.
• Working knowledge of the Risk Management Framework (RMF) and information system authorization processes.
• Experience developing or maintaining RMF authorization documentation and security control evidence.
• Experience with eMASS or comparable government authorization systems.
• Hands-on experience implementing and maintaining NIST 800-171 controls.
• Knowledge of NIST SP 800-53 security controls.
• Experience developing and maintaining SSPs.
• Hands-on experience with the Microsoft Security Stack.
• Endpoint protection, logging, patching, monitoring, and vulnerability management.
• Network security, firewalls, VPNs, etc.
• Familiarity with GCC High / IL4+ Level impact environments.
• Knowledge of DCSA cybersecurity requirements and the National Industrial Security Program Operating Manual (NISPOM).
• Experience with vulnerability management, system hardening, patching, configuration management, auditing, access control, and continuous monitoring.
• Ability to interpret system architectures, network diagrams, hardware and software configurations, and technical security controls.
• Strong written communication, documentation, and organizational skills.

Preferred Qualifications:

• Previous experience serving as an ISSM, ISSO, ISSE, or similar information system security role.
• Experience supporting DCSA-authorized classified information systems.
• Experience preparing systems for DCSA assessments, inspections, or authorization activities.
• Familiarity with DISA STIGs and other system hardening requirements.
• Experience with Windows environments, Active Directory, networking, endpoint security, vulnerability scanning, and logging technologies.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline, or equivalent professional experience.
• Relevant cybersecurity certification such as CISSP, CISM, CASP+, Security+, or comparable certification.

Delta Solutions & Strategies offers a generous benefits package to include:

• medical
• dental
• vision
• life insurance
• 401(k)
• PTO
• paid holidays
• parental
• military
• jury duty paid leaves

In compliance with Colorado's Equal Pay for Equal Work Act, the salary range for this position is $115,000-$135,000. Please note that the salary information is a general guideline only. Delta Solutions & Strategies considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/training, key skills, internal peer equity, as well as market and business considerations when extending an offer.

We are an Equal Opportunity Employer. We do not and will not discriminate in employment and personnel practices based on race, sex, age, disability, veteran status, religion, national origin or any other basis prohibited by applicable law. Hiring, transferring, and promotion practices are performed without regard to the above listed items. EEO/AAP, M, F, V, D