Information System Security Manager (ISSM)

LMI Government Consulting; Northern (KY); Hybrid; USD 110,000 - 180,000; Full time

Job summary

LMI Government Consulting seeks an experienced Information System Security Manager (ISSM) to lead security authorization and continuous monitoring for enterprise IT in a fast-paced prototype program. You will coordinate with system owners, engineers, and government stakeholders to ensure compliance with NIST and CNSSI controls across multiple enclaves.

Location is Washington, DC metro with 25–50% travel, immediate availability preferred.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field.
• 8+ years of cybersecurity, information assurance, security authorization, or Risk Management Framework experience, including in classified environments.
• Experience leading security authorization for complex enterprise, interconnected, or multi-enclave systems.
• Strong knowledge of NIST SP 800-37, NIST SP 800-53, CNSSI 1253, and federal, defense, or intelligence security requirements.
• Experience developing or reviewing system security plans, control evidence, assessments, plans of action and milestones, authorization packages, and monitoring deliverables.
• Experience supporting SCIF or other accredited classified environments and advising system owners and program leaders on cybersecurity risk.

Responsibilities

• Lead Risk Management Framework implementation across the system lifecycle, including categorization, control selection and tailoring, implementation, assessment, authorization, and continuous monitoring.
• Develop security authorization strategies and roadmaps for classified and unclassified systems, multi-enclave environments, and interconnected capabilities.
• Coordinate system security plans, implementation evidence, plans of action and milestones, assessment packages, authorization decisions, and monitoring artifacts.
• Interpret and apply NIST SP 800-37, NIST SP 800-53, CNSSI 1253, defense and intelligence guidance, customer policies, and program requirements.
• Advise the Lead Cybersecurity Integrator, system owners, the Chief Engineer, program leadership, and technical teams on cyber risk, control gaps, remediation priorities, and risk acceptance.
• Integrate security requirements into architecture, engineering, acquisition, change management, testing, deployment, operations, and sustainment.
• Oversee vulnerability, configuration, and compliance monitoring; prioritize remediation based on exploitability, mission impact, exposure, and operational consequence.
• Coordinate assessors, authorizing officials, security officers, engineers, operators, and stakeholders through reviews, audits, incidents, and authorization milestones.
• Automate evidence collection, control validation, reporting, plan-of-action tracking, and monitoring while preserving auditability and human oversight.

Skills

Risk Management Framework

Security authorization

Stakeholder coordination

Security assessment & monitoring

Security writing & briefings

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field

Tools

SCIF environments

POA&M tooling

Vulnerability management tooling

Continuous monitoring tools

Job description

Overview

LMI is a new breed of digital solutions provider dedicated to accelerating government impact with innovation and speed. Investing in technology and prototypes ahead of need, LMI brings commercial-grade platforms and mission-ready AI to federal agencies at commercial speed.

Leveraging our mission-ready technology and solutions, provenexpertisein federal deployment, and strategic relationships, we enhance outcomes for the government, efficiently and effectively. With a focus on agility and collaboration, LMI serves thedefense, space, homeland, healthcare, and intelligence sectors—helping agencies navigate complexity and outpace change.Headquartered in Tysons, Virginia, LMI is committed to delivering impactful results that strengthen missions and drive lasting value.

Responsibilities

LMI is seeking a skilled Information System Security Manager (ISSM) to assist the Lead Cybersecurity Integrator to lead security authorization, governance, and continuous monitoring for enterprise IT capabilities across new and existing secure facilities. The ISSM will coordinate with system owners, engineers, security officers, cybersecurity personnel, and government stakeholders to ensure systems are designed, documented, authorized, operated, and sustained in accordance with security requirements. This is an execution-oriented role supporting a fast-paced, milestone-driven prototype effort with near-term deliverable commitments. Success requires risk-based judgment, rigorous Risk Management Framework execution, clear communication, and the ability to balance mission, security, operational risk, and delivery timelines.

Primary duties include:

• Lead Risk Management Framework implementation across the system lifecycle, including categorization, control selection and tailoring, implementation, assessment, authorization, and continuous monitoring.

• Develop security authorization strategies and roadmaps for classified and unclassified systems, multi-enclave environments, and interconnected capabilities.

• Coordinate system security plans, implementation evidence, plans of action and milestones, assessment packages, authorization decisions, and monitoring artifacts.

• Interpret and apply NIST SP 800-37, NIST SP 800-53, CNSSI 1253, defense and intelligence guidance, customer policies, and program requirements.

• Advise the Lead Cybersecurity Integrator, system owners, the Chief Engineer, program leadership, and technical teams on cyber risk, control gaps, remediation priorities, and risk acceptance.

• Integrate security requirements into architecture, engineering, acquisition, change management, testing, deployment, operations, and sustainment.

• Oversee vulnerability, configuration, and compliance monitoring; prioritize remediation based on exploitability, mission impact, exposure, and operational consequence.

• Coordinate assessors, authorizing officials, security officers, engineers, operators, and stakeholders through reviews, audits, incidents, and authorization milestones.

• Automate evidence collection, control validation, reporting, plan-of-action tracking, and monitoring while preserving auditability and human oversight.

Foundational Skills

• Risk Management Framework and security authorization lifecycle principles.

• NIST SP 800-37, NIST SP 800-53, CNSSI 1253, and federal, defense, and intelligence security-control frameworks.

• System security plans, control traceability, evidence, assessments, plans of action and milestones, and authorization packages.

• Risk assessment, security-control tailoring, compensating controls, residual risk, and risk acceptance.

• Continuous monitoring, vulnerability management, secure configuration, patching, and compliance assessment.

• Systems, networking, cloud, identity, application, data, and operational-security fundamentals.

• Zero-trust, least-privilege, defense-in-depth, segmentation, and secure-boundary principles.

• Configuration, change, incident, problem, and technology-lifecycle management.

• Security automation, metrics, technical writing, briefings, and stakeholder coordination.

Location: This position is based in the Washington, DC metro area, with travel to program locations.

Travel: This position requires approximately 25-50% travel to support activities across multiple program locations.

Availability: Immediate availability strongly preferred; unclassified planning work may begin while program access nominations are processed.

Qualifications

Required:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field.

• 8+ years of cybersecurity, information assurance, security authorization, or Risk Management Framework experience, including in classified environments.

• Experience leading security authorization for complex enterprise, interconnected, or multi-enclave systems.

• Strong knowledge of NIST SP 800-37, NIST SP 800-53, CNSSI 1253, and federal, defense, or intelligence security requirements.

• Experience developing or reviewing system security plans, control evidence, assessments, plans of action and milestones, authorization packages, and monitoring deliverables.

• Experience supporting SCIF or other accredited classified environments and advising system owners and program leaders on cybersecurity risk.

• Ability to coordinate technical and nontechnical stakeholders and communicate security status, risk, remediation priorities, and authorization decisions.

Nice to Have:

• Relevant advanced cybersecurity, information-assurance, or risk-management certification.

• Experience authorizing or integrating cross-domain solutions (CDS) and controlled interfaces.

• Experience supporting Special Access Program (SAP) facilities, systems, or environments.

• Experience supporting network or security operations centers (NOC/SOC), continuous monitoring, and 24x7 incident-response environments.

• Experience with security automation, governance-risk-and-compliance workflows, or continuous control validation.

Target salary range: $110,000.00 - $180,000.00. Final compensation will be determined by a variety of factors including but not limited to your skills, experience, education, and/or certifications.

TS/SCI clearance with SAP eligibility isrequiredfor thisposition.TS/SCI clearance with SAP eligibility isrequiredfor this position.Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. LMI will only consider applicants with current security clearances. Please note that only U.S. citizens are eligible for a security clearance.

Job Locations

US-DC-Washington, DC