Information System Security Manager (ISSM)

Omniscius Consulting; Lorton (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

Omniscius Consulting seeks an experienced Information System Security Manager (ISSM) to lead security for a DoD program in Lorton, Virginia. You will oversee the security of program information systems, ensure compliance with NIST, ISO 27001, and DoD standards, and develop security policies and procedures.

You will collaborate with ISSOs, system administrators, the AO, and stakeholders to maintain a strong security posture across classified systems, coordinate RMF activities, and drive

Qualifications

• 5–7+ years of information security management experience.
• 5+ years of experience in SCI/SAP environments.
• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Strong knowledge of security standards and regulations (NIST, ISO 27001, HIPAA).
• Experience with security tools and technologies such as firewalls, IDS/IPS, and SIEM.
• Excellent communication and leadership skills.

Responsibilities

• Develop and maintain a formal IS security program and policies for operational environments.
• Develop and oversee operational information systems security implementation policy and guidelines.
• Coordinate with the PSO or cognizant security official on approval of external information systems.
• Ensure ISSOs under their purview are appointed in writing and follow established IS policies and procedures; assume ISSO responsibilities in their absence when needed.
• Ensure System Administrators monitor resources for system vulnerabilities or ongoing attacks, and that periodic security testing is conducted.
• Ensure approved procedures are used for sanitizing and releasing system components and media.
• Maintain a repository of cybersecurity-related documentation, including ATOs, for all systems under their purview.
• Coordinate IS security inspections, tests, and reviews, and ensure proper response when an incident or vulnerability is discovered.
• Ensure configuration management (CM) policies are followed for any hardware/software changes, coordinating with the AO prior to implementation.
• Serve as a voting member of the Configuration Control Board (CCB) and/or Risk Executive Board, with authority to flag proposed changes deemed a security risk.
• Manage, maintain, and execute the information security continuous monitoring plan.
• Maintain working relationships with the ISO, AO, SCA, and other ISSMs, and provide guidance to the broader cybersecurity team.

Skills

Information security management

Leadership

Communication

Risk management

Education

Bachelor's degree in CS/IT

Tools

Firewalls

IDS/IPS

SIEM

Job description

Our client is searching for an experienced Information System Security Manager (ISSM) to join our team supporting a DoD program in Lorton, Virginia. As the ISSM, you will oversee the security of program information systems, ensure compliance with industry and DoD standards, and develop and implement security policies and procedures. You'll work closely with ISSOs, system administrators, the Authorizing Official (AO), and other program stakeholders to maintain a strong security posture across classified systems. If you have a strong background in information security management, RMF, and risk/compliance leadership, we want to hear from you!

Key Responsibilities:

• Develop and maintain a formal IS security program and policies for operational environments.
• Develop and oversee operational information systems security implementation policy and guidelines.
• Coordinate with the PSO or cognizant security official on approval of external information systems.
• Ensure ISSOs under their purview are appointed in writing and follow established IS policies and procedures; assume ISSO responsibilities in their absence when needed.
• Ensure System Administrators monitor resources for system vulnerabilities or ongoing attacks, and that periodic security testing is conducted.
• Ensure approved procedures are used for sanitizing and releasing system components and media.
• Maintain a repository of cybersecurity-related documentation, including ATOs, for all systems under their purview.
• Coordinate IS security inspections, tests, and reviews, and ensure proper response when an incident or vulnerability is discovered.
• Ensure configuration management (CM) policies are followed for any hardware/software changes, coordinating with the AO prior to implementation.
• Serve as a voting member of the Configuration Control Board (CCB) and/or Risk Executive Board, with authority to flag proposed changes deemed a security risk.
• Manage, maintain, and execute the information security continuous monitoring plan.
• Maintain working relationships with the ISO, AO, SCA, and other ISSMs, and provide guidance to the broader cybersecurity team.

Required Qualifications:

• 5–7+ years of experience in information security management.
• 5+ years of experience in SCI/SAP environments.
• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Strong knowledge of security standards and regulations (NIST, ISO 27001, HIPAA).
• Experience with security tools and technologies such as firewalls, IDS/IPS, and SIEM.
• Excellent communication and leadership skills.

Preferred Qualifications:

• AZ-500 (Azure Security Engineer Associate), SC-100 (Cybersecurity Architect Expert), or AZ-305 (Azure Solutions Architect Expert), or similar certification.
• 5+ years of leadership experience in a relevant business area.
• Technical certifications in Azure.