Information System Security Manager (ISSM) - Level 4

VSO Inc.; Lorton (VA); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health benefits

Learning & development

Flexible work arrangements

Job summary

VSO Inc. in Lorton, VA seeks an experienced Information System Security Manager (ISSM) – Level 4 to lead security for a DoD program. The role focuses on RMF, risk/compliance leadership, and collaboration with ISSOs, the AO, and system admins to uphold security across classified systems.

You will develop security policies, coordinate testing, maintain ATOs, and participate in security governance boards, with onsite work five days a week and travel as needed. Active TS/SCI clearance is required.

Qualifications

• 5–7+ years of information security management experience.
• 5+ years in SCI/SAP environments.
• Strong knowledge of security standards (NIST, ISO 27001, HIPAA).
• Excellent communication and leadership skills.

Responsibilities

• Develop and maintain formal IS security program and policies.
• Coordinate with PSO/cognizant security official on external IS approvals.
• Ensure ISSOs under supervision are appointed and follow IS policies.
• Oversee system administrators for vulnerability monitoring and testing.
• Maintain CVM policies and release procedures for hardware/software changes.
• Coordinate security inspections, tests, and incident responses.
• Serve on the Configuration Control Board (CCB) or Risk Exec Board.
• Build relationships with ISO, AO, SCA, and broader cybersecurity team.

Skills

Security management

SCI/SAP

Security tools

Clear communication

Leadership

Education

Bachelor's degree in CS/IT or related field

Tools

SIEM

Firewalls

Job description

Information System Security Manager (ISSM) - Level 4
Lorton, VA with travel

Are you looking to take the next step in your career as an Information System Security Manager (ISSM) — Level 4? Let's chat and see if we're a good match!

Opportunity:

Virtual Service Operations is searching for an experienced Information System Security Manager (ISSM) to join our team supporting a DoD program in Lorton, Virginia. As the ISSM, you will oversee the security of program information systems, ensure compliance with industry and DoD standards, and develop and implement security policies and procedures. You'll work closely with ISSOs, system administrators, the Authorizing Official (AO), and other program stakeholders to maintain a strong security posture across classified systems. If you have a strong background in information security management, RMF, and risk/compliance leadership, we want to hear from you!

Key Responsibilities:

• Develop and maintain a formal IS security program and policies for operational environments.
• Develop and oversee operational information systems security implementation policy and guidelines.
• Coordinate with the PSO or cognizant security official on approval of external information systems.
• Ensure ISSOs under their purview are appointed in writing and follow established IS policies and procedures; assume ISSO responsibilities in their absence when needed.
• Ensure System Administrators monitor resources for system vulnerabilities or ongoing attacks, and that periodic security testing is conducted.
• Ensure approved procedures are used for sanitizing and releasing system components and media.
• Maintain a repository of cybersecurity-related documentation, including ATOs, for all systems under their purview.
• Coordinate IS security inspections, tests, and reviews, and ensure proper response when an incident or vulnerability is discovered.
• Ensure configuration management (CM) policies are followed for any hardware/software changes, coordinating with the AO prior to implementation.
• Serve as a voting member of the Configuration Control Board (CCB) and/or Risk Executive Board, with authority to flag proposed changes deemed a security risk.
• Manage, maintain, and execute the information security continuous monitoring plan.
• Maintain working relationships with the ISO, AO, SCA, and other ISSMs, and provide guidance to the broader cybersecurity team.

Required Qualifications:

• 5–7+ years of experience in information security management.
• 5+ years of experience in SCI/SAP environments.
• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Strong knowledge of security standards and regulations (NIST, ISO 27001, HIPAA).
• Experience with security tools and technologies such as firewalls, IDS/IPS, and SIEM.
• Excellent communication and leadership skills.

Preferred Qualifications:

• AZ-500 (Azure Security Engineer Associate), SC-100 (Cybersecurity Architect Expert), or AZ-305 (Azure Solutions Architect Expert), or similar certification.
• 5+ years of leadership experience in a relevant business area.
• Technical certifications in Azure.

Requirements

• Must be within driving distance of Lorton, VA, or willing to relocate (Relocation Assistance Package Available).
• Must be willing to work onsite 5 days per week (may include some travel).
• Active TS/SCI Clearance
• Strong written and verbal communication skills with excellent attention to detail.
• Ability to work independently and collaboratively in a mission-focused environment.

What is Important to Us:

• You are an excellent communicator in writing and speaking.
• You have the ability to work independently but also value teamwork.
• Your problem-solving skills are excellent.
• You are looking for a job where performance appraisals occur regularly, and you look forward to advancing your career.
• You seek a community of virtue-centered co-workers and clients.

What we offer you:

As part of the VSO company, you will be part of a virtue-centered team who value their work and teammates. This is a no-jerk zone.

• We provide ongoing learning and development opportunities to foster continuous growth.
• We offer competitive salaries, health benefits, and flexible work arrangements.

More About VSO

VSO is a hybrid cloud and managed services consulting firm. Much of VSO’s success can be attributed to our deep partnerships with IT services industry leaders such as AWS, IBM, Microsoft and others. VSO leverages numerous other partner relationships so as to provide our customers with optimal support. Additionally, we take pride in taking care of our employees. We offer a wide variety of benefits for eligible employees related to health, retirement, professional development, and more! For more information, please visit our website at https://vso-inc.com/careers