Information System Security Manager (Sr.) (Top Secret) with Security Clearance

RMantra Solutions; Fort Meade (MD); On-site; USD 125,000 - 195,000; Full time

Job summary

RMantra Solutions in Fort Meade, MD is seeking a Sr. Information System Security Manager to lead RMF lifecycle, maintain ATOs, and provide ISSM, FISMA, and certification support for DoD mission systems.

The ideal candidate will hold a Bachelor’s degree with 8+ years or a Master’s with 6+ years, and possess CISSP or CISM certification, plus extensive DoD policy knowledge. You will coordinate assessments, document security controls in eMASS, and develop POA&Ms.

Qualifications

• Bachelor’s degree with 8+ years of DoD security experience; Master’s degree acceptable with 6+ years.
• DoD security certifications such as CISSP or CISM preferred.
• Deep knowledge of NIST SP 800-53, RMF, FISMA, ICD 503, and JSIG.
• Experience building and maintaining an ATO for enterprise systems.
• Experience with security testing, vulnerability assessments, and security reporting.

Responsibilities

• Manage the RMF lifecycle for supported systems to achieve and maintain ATO accreditation.
• Provide ISSM, FISMA, and certification and accreditation support for systems and components.
• Conduct recurring assessments of security controls and documentation in eMASS and PPSM.
• Coordinate cybersecurity activities supporting interim and final authorization processes.

Skills

RMF lifecycle

DoD cybersecurity policies

NIST 800-53

FISMA compliance

CISSP

CISM

eMASS

POA&Ms

Threat assessment

Vulnerability management

Education

Bachelor’s Degree + 8+ years

Master’s Degree + 6+ years

Tools

eMASS

PPSM

Job description

RMantra is conducting immediate interviews for a Sr. Information System Security Mgr. at Fort Meade, MD. Clearance: Minimum Secret clearance required, we can hold up to a TS or TS/SCI.

Primary Responsibilities

• Manage the Risk Management Framework (RMF) lifecycle for supported systems enabling the achievement and continued maintenance of Authority to Operate (ATO) accreditation.
• Provide ISSM, FISMA, and certification and accreditation support for systems and associated components.
• Conduct recurring assessments of security controls and documentation in eMASS and PPSM to verify continued accuracy, compliance, and readiness.
• Manage whitelist records, address vulnerabilities identified through recurring IAVMS scans, and develop Plans of Action and Milestones (POA&Ms) when required.
• Maintain eMASS control records and POA&Ms in accordance with ATO conditions, approval requirements, and remediation timelines.
• Coordinate cybersecurity activities supporting interim and final authorization to test and operate, including assessments, mitigation planning, patch validation, implementation tracking, and status reporting.
• Create and deliver cybersecurity test plans, test reports, implementation plans, security technical configuration documentation, vulnerability assessment reports, and authorization package materials.
• Lead cybersecurity governance and reporting activities, including the development and maintenance of system architectures, requirements, security plans, protection plans, IAVA actions, and IA-related objectives.
• Prepare program documentation, evidence, and briefings for DISA OAB reviews and support the team throughout the review process.

Education

Bachelor’s Degree With 8+ Years Of Experience Or Master’s Degree With 6+ Years Of Experience. Additional Experience May Be Considered In Lieu Of a Degree.

Certifications

• CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or similar cybersecurity certification.

Required skills

• In-depth knowledge of DoD cybersecurity policies, frameworks, and compliance standards (e.g., NIST 800-53, RMF, FISMA, ICD 503, JSIG).
• In-depth experience with network systems and building/maintaining an ATO for enterprise computing information systems.
• Experience with system security engineering, risk management, and vulnerability assessments.
• Strong understanding of network security, security controls, and common cybersecurity tools (e.g., firewalls, IDS/IPS, SIEM, endpoint protection).
• Ability to work independently and collaborate effectively with cross-functional teams.
• Strong communication skills, including the ability to create and present detailed security reports to stakeholders. Experience in managing security for complex DoD programs or mission-critical systems.
• Experience with security tools for vulnerability scanning, penetration testing, and security auditing.
• Advanced security certifications (e.g., CISA, CEH, CSSP, etc.).
• Experience with configuration management and change management processes in a secure environment.
• Experience with automation and the continuous ATO (cATO) process.