Information System Security Manager (ISSM) - TS/SCI Clearance with Security Clearance

Elucidation Concepts, LLC.; Fort Meade (MD); On-site; USD 140,000 - 190,000; Full time

Job summary

Elucidation Concepts, LLC. seeks an experienced Information Systems Security Manager (ISSM) to manage security for DoD/IC programs.

You will oversee the security posture of classified systems, coordinate RMF/DIACAP processes, and lead vulnerability assessments and risk mitigations throughout the system lifecycle. The role requires active TS/SCI clearance with Full Scope Polygraph, plus extensive experience in security planning, accreditation artifacts, and government/auditor interaction.

Qualifications

• Active TS/SCI clearance with Full Scope Polygraph is required.
• Minimum 14 years of ISSM/ISSO related cybersecurity experience; may substitute 5 years for a Bachelor's.
• DoD 8570 IAM Level III certifications (e.g., CISSP, CISM, GSLC).

Responsibilities

• Gather and analyze requirements to support security planning and compliance.
• Coordinate security requirements across the system development lifecycle.
• Maintain SSPs, RARs, SARs, and POA&Ms and ensure accreditation.
• Lead security audits, vulnerability assessments, and remediation activities.
• Oversee configuration management to protect baselines.
• Develop and deliver security training for users and admins.
• Interface with Authorizing Officials and external auditors for ATOs.

Skills

TS/SCI clearance

Full Scope Polygraph

ISSM/ISSO experience

RMF/DIACAP experience

Security posture management

Lifecycle security

Education

Bachelor's degree in Info Assurance/Cybersecurity/CS/IS

Job description

Active TS/SCI Clearance + FS Polygraph required** Elucidation Concepts is seeking a skilled and experienced Information Systems Security Manager (ISSM) to join our team. In this role, you will perform a wide range of duties to manage and maintain the operational security posture for assigned programs, ensuring that security policies are implemented and enforced in alignment with DoD and Intelligence Community (IC) requirements. As an ISSM, you will oversee the security aspects of classified information systems, lead day-to-day security operations, manage vulnerability and risk assessments, and guide configuration management and system change activities to ensure the protection of mission-critical systems. The ideal candidate will have hands-on experience supporting the NSA/CSS Risk Management Framework (RMF) process and the DoD Information Assurance Certification and Accreditation Process (DIACAP). You will support planning, coordination, and oversight of organizational information security implementation, partnering with engineers, system administrators, and program managers to design, implement, and sustain secure IT systems throughout their lifecycle.

Responsibilities

• Perform requirements gathering and detailed analysis to support effective security planning and compliance.
• Conduct functional analyses to identify required tasks and their interrelationships.
• Identify and map current security infrastructure to establish a baseline for defining future security improvements.
• Collaborate with engineers to define and integrate system security requirements across the system development lifecycle.
• Develop, implement, and enforce information systems security policies, standards, and procedures.
• Analyze user needs to determine functional and cross-functional security requirements.
• Gather and organize technical information about mission objectives, security needs, existing security products, and ongoing programs.
• Oversee and maintain security authorization packages, including System Security Plans (SSPs), Risk Assessment Reports (RARs), Security Assessment Reports (SARs), and Plan of Actions and Milestones (POA&Ms).
• Conduct regular security audits, compliance inspections, and vulnerability assessments; coordinate remediation activities to mitigate risks.
• Manage configuration management (CM) processes to ensure the integrity and secure state of system baselines.
• Develop and deliver security training and awareness materials for system users and administrators.
• Serve as the primary point of contact for information assurance matters related to assigned systems.
• Develop and implement Incident Response Plans (IRPs); coordinate response and recovery activities for security incidents.
• Report security incidents, system changes, and accreditation status to Elucidation Concepts leadership and Government stakeholders.
• Interface directly with Authorizing Officials (AOs), Security Control Assessors (SCAs), and external auditors to achieve and maintain Authority to Operate (ATO) for all systems.
• Monitor and maintain continuous compliance with applicable government and agency security standards.
• Provide guidance on secure system design and engineering, ensuring new implementations meet accreditation requirements.
• Develop risk mitigation strategies and advise leadership on security posture and recommendations for improvement.
• Support system lifecycle activities including design reviews, upgrades, and decommissioning.
• Stay current on evolving cyber threats, industry standards, and best practices; apply this knowledge to strengthen Elucidation Concepts' security posture.

Qualifications

• Clearance Level: Active TS/SCI clearance with Full Scope Polygraph required.
• Skill Level 2: Experience: Minimum of 14 years of experience as an ISSM, ISSO, or related cybersecurity role. Five (5) additional years of relevant experience may be substituted for a Bachelor's degree.
• Education: Bachelor's degree in Information Assurance, Cybersecurity, Computer Science, Information Systems, or a related field from an accredited institution.
• Skill Level 3: Experience: Minimum of 20 years of experience as an ISSM, ISSO, or related cybersecurity role. Five (5) additional years of relevant experience may be substituted for a Bachelor's degree.
• Education: Bachelor's degree in Information Assurance, Cybersecurity, Computer Science, Information Systems, or a related field from an accredited institution.
• Certifications: Must meet DoD 8570 IAM Level III certification requirements (e.g., CISSP, CISM, GSLC).
• Physical Requirements: While performing the duties of this job, the employee is regularly required to stand, walk, and use hands to touch, handle or feel objects, tools or controls. The employee frequently is required to talk and hear and occasionally required to reach with hands and arms and stoop, kneel, crouch, or crawl. Must regularly lift and/or move up to 10 pounds, and occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this job include close vision, peripheral vision, depth perception and the ability to adjust focus.
• EEO/AA Veterans and Individuals with Disabilities