Information System Security Manager (Sr.) (Top Secret) with Security Clearance

RMantra Solutions Inc.; Fort Meade (MD); On-site; USD 120,000 - 160,000; Full time

Job summary

RMantra is seeking a Sr. Information System Security Manager in Fort Meade, MD to lead RMF lifecycle activities and support DoD accreditation programs.

The role requires evaluating security controls, preparing artifacts, and coordinating with DISA/OPA review processes. The ideal candidate will hold a Bachelor’s with 8+ years (or a Master’s with 6+ years), CISSP/CISM or equivalent, and demonstrable experience with RMF, NIST standards, and DoD cybersecurity programs.

Qualifications

• Bachelor’s degree with 8+ years in DoD IT or Master’s with 6+ years.
• CISSP, CISM or equivalent certifications required.
• Experience RMF/ATO lifecycle management.
• Excellent written and verbal communication with stakeholders.

Responsibilities

• Manage RMF lifecycle for systems achieving and maintaining ATO.
• Provide ISSM, FISMA, and certification support for systems.
• Conduct recurring security control assessments and documentation reviews.
• Maintain eMASS records and POA&Ms per ATO conditions.
• Coordinate security activities for interim/final authorization to test and operate.
• Deliver cybersecurity plans, reports, and authorization materials.

Skills

RMF/NIST 800-53

DoD policies

Vulnerability assessments

Network security

SIEM tooling

Report writing

Stakeholder comms

Automation/cATO

Education

Bachelor’s degree with 8+ years

Master’s degree with 6+ years

Job description

RMantra is conducting immediate interviews for a Sr. Information System Security Mgr. at Fort Meade, MD. Clearance: Minimum Secret clearance required, we can hold up to a TS or TS/SCI.

Primary Responsibilities

• Manage the Risk Management Framework (RMF) lifecycle for supported systems enabling the achievement and continued maintenance of Authority to Operate (ATO) accreditation.
• Provide ISSM, FISMA, and certification and accreditation support for systems and associated components.
• Conduct recurring assessments of security controls and documentation in eMASS and PPSM to verify continued accuracy, compliance, and readiness.
• Manage whitelist records, address vulnerabilities identified through recurring IAVMS scans, and develop Plans of Action and Milestones (POA&Ms) when required.
• Maintain eMASS control records and POA&Ms in accordance with ATO conditions, approval requirements, and remediation timelines.
• Coordinate cybersecurity activities supporting interim and final authorization to test and operate, including assessments, mitigation planning, patch validation, implementation tracking, and status reporting.
• Create and deliver cybersecurity test plans, test reports, implementation plans, security technical configuration documentation, vulnerability assessment reports, and authorization package materials.
• Lead cybersecurity governance and reporting activities, including the development and maintenance of system architectures, requirements, security plans, protection plans, IAVA actions, and IA-related objectives.
• Prepare program documentation, evidence, and briefings for DISA OAB reviews and support the team throughout the review process.

Education

• Bachelor’s Degree With 8+ Years Of Experience Or Master’s Degree With 6+ Years Of Experience. Additional Experience May Be Considered In Lieu Of a Degree.

Certifications

• CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or similar cybersecurity certification.

Required skills

• In-depth knowledge of DoD cybersecurity policies, frameworks, and compliance standards (e.g., NIST 800-53, RMF, FISMA, ICD 503, JSIG).
• In-depth experience with network systems and building/maintaining an ATO for enterprise computing information systems.
• Experience with system security engineering, risk management, and vulnerability assessments.
• Strong understanding of network security, security controls, and common cybersecurity tools (e.g., firewalls, IDS/IPS, SIEM, endpoint protection).
• Ability to work independently and collaborate effectively with cross-functional teams.
• Strong communication skills, including the ability to create and present detailed security reports to stakeholders. Experience in managing security for complex DoD programs or mission-critical systems.
• Experience with security tools for vulnerability scanning, penetration testing, and security auditing.
• Advanced security certifications (e.g., CISA, CEH, CSSP, etc.).
• Experience with configuration management and change management processes in a secure environment.
• Experience with automation and the continuous ATO (cATO) process.