Information System Security Officer / Information System Security Manager (ISSO/ISSM)

BlueSnap, Inc; Washington (District of Columbia); On-site; USD 200,000 - 220,000; Full time

Job summary

A leading company in Operational Technology cybersecurity is looking for an experienced Information System Security Officer / Manager (ISSO/ISSM) to lead the security program of its newly created US public sector subsidiary. The ideal candidate will have extensive experience and technical expertise in managing security policies compliant with federal regulations.

Benefits

Hybrid working culture

Biennial company shutdown for mental health

Professional development opportunities

Comprehensive health benefits

Qualifications

• 10-15 years of experience as an ISSO/ISSM.
• Active Top Secret security clearance required.
• Certifications: CISSP, CISM, CISA, or similar.

Responsibilities

• Establish and maintain the information security program.
• Oversee security operations, including incident response.
• Ensure compliance with federal regulations and standards.

Skills

Communication

Incident Response

Risk Management

Cybersecurity Frameworks (NIST, FISMA, RMF)

Education

Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science

Master’s degree

Tools

NIST Cybersecurity Framework

Risk Management Framework (RMF)

Job description

We’re growing and looking to hireInformation System Security Officer / Information System Security Manager (ISSO/ISSM) who embodies our core values: People First, Customer Obsession, Strive for Excellence, and Integrity. Claroty, a global leader in Operational Technology (OT) cybersecurity, is seeking an experienced and highly motivated ISSO/ISSM to help establish and lead the security program for our newly created US public sector subsidiary. This pivotal role will be responsible for setting up, implementing, and managing security policies, procedures, and controls to ensure compliance with federal regulations and to protect sensitive information systems in a rapidly evolving OT environment. The ideal candidate will have 10–15 years of relevant experience, deep expertise in federal cybersecurity frameworks, and a proven track record of building and maintaining security programs for public sector organizations.

About Claroty:

Claroty has redefined cyber-physical systems (CPS) protection with an unrivaled industry-centric platform built to secure mission-critical infrastructure. The Claroty Platform provides the deepest asset visibility and the broadest, built-for-CPS solution set in the market comprising exposure management, network protection, secure access, and threat detection – whether in the cloud with Claroty xDome or on-premise with Claroty Continuous Threat Detection (CTD). Backed by award-winning threat research and a breadth of technology alliances, The Claroty Platform enables organizations to effectively reduce CPS risk, with the fastest time-to-value and lower total cost of ownership. Our solutions are deployed by over 1,000 organizations at thousands of sites across all seven continents.

A Great Place to Work certified company, Claroty is headquartered in New York City with employees across the Americas, Europe, Asia-Pacific, and Tel Aviv. The company is widely recognized as the industry leader in CPS protection, with backing from the world’s largest investment firms and industrial automation vendors, as well as being named a Leader in the 2025 Gartner Magic Quadrant for CPS Protection Platforms, recognized by KLAS Research as Best in KLAS for Healthcare IoT Security five years in a row, and ranking on the Forbes Cloud 100 and Deloitte Technology Fast 500 multiple consecutive years.

Responsibilities

As a Information System Security Officer / Information System Security Manager (ISSO/ISSM), Your impact will be:

• Program Development: Establish and maintain the subsidiary’s information security program, policies, and procedures in alignment with federal requirements (e.g., NIST, FISMA, FedRAMP, CMMC).Author, review, certify, and/or maintain information awareness (IA) and security management plans to include RMF Implementation Plans, System Security Management Plans, Information Support Plans, Program Protection Plans (PPPs), Security Risk Analyses, Security Vulnerability and Countermeasure Analyses, Security Concepts of Operations, Operational Security (OPSEC) Plans, and other system/network security related documents.
• Security Operations: Oversee day-to-day security operations, including monitoring, incident response, vulnerability management, and risk assessments for OT and IT systems.
• Compliance: Ensure ongoing compliance with all applicable federal regulations and standards; prepare for and support inspections, audits, assessments, and continuous monitoring activities.
• System Authorization: Lead the Risk Management Framework (RMF) process for system accreditation and authorization (A&A), including documentation, security controls implementation, and liaison with Authorizing Officials (AOs).
• Collaboration: Work closely with engineering, IT, legal, and executive teams to integrate security into business and technical processes.
• Security Awareness: Develop and deliver security training and awareness programs for employees and contractors.
• Incident Management: Lead investigations and response efforts for security incidents, ensuring timely reporting and remediation.
• Continuous Improvement: Evaluate and recommend new security technologies, tools, and best practices to enhance the subsidiary’s security posture.
• Reporting: Provide regular updates and briefings to executive leadership and government stakeholders on security status, risks, and compliance.

Requirements

What do you need to succeed in this role?

• Experience: 10–15 years of experience as an ISSO/ISSM or in a similar senior security role supporting US public sector clients or federal agencies.
• Clearance: Active Top Secret security clearance.
• Technical Expertise: Deep understanding of federal security frameworks (NIST SP 800-53, RMF, FISMA, FedRAMP, CMMC, PKI), and incident response.
• Program Leadership: Demonstrated experience establishing and managing security programs in a public sector or highly regulated environment.
• Documentation: Strong experience with security documentation, policies, procedures, and system security plans (SSPs).
• Communication: Excellent written and verbal communication skills; able to brief executives and interface with government stakeholders.
• Certifications: CISSP, CISM, CISA, or similar certifications required; additional OT/ICS security certifications (e.g., GICSP, GRID) preferred.
• Education: Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, or related field (Master’s preferred).

Preferred Qualifications

• Experience working with or within federal civilian, DoD, or intelligence community environments.
• Familiarity with OT/ICS security solutions, especially in critical infrastructure sectors.
• Experience supporting a newly established subsidiary or startup environment that is pursuing FOCI mitigation.
• Experience with cloud security and hybrid architectures.

Why Claroty? Our Culture and Benefits:

• As aGreat Place to Work certifiedcompany, we take pride in the culture we’ve built together—one rooted in camaraderie, credibility, fairness, and respect.
• Claroty is apeople first company. With strong bonds amongst the team, we believe in prioritizing personal care and support over work, confident that results follow from a harmonious environment. We celebrate professional and personal successes, committed to fostering a diverse and inclusive space.
• Stability, we demonstrate continued growth over the past few years, raised over 700M$ from top tier investors, we have top tier board members and our products are sold worldwide, over 1000 customers.
• We understand the importance of maintaining ahealthy work-life balance, and encourage people to take the time they need to rest and prioritize their mental and physical health. We also provide a biannual“ClaroBreak”,a company-wide long weekend shutdown so we can all rest, recharge and spend time with our loved ones.
• We care about your development. At Claroty, we prioritize excellence and uphold high professional and ethical standards. We encourage career growth and exploration within the company, facilitated by biannual performance reviews, feedback sessions, and individual development planning, complemented by professional courses.
• We believe in transparency and openness. That’s why we regularly hold company all-hands, town hall meetings, and “Coffee with the CEO” sessions. We also conduct round table sessions and employee satisfaction surveys, to keep a pulse on what matters most to our team members and make our culture the best it can be.
• While we have physical offices in New York, Tel Aviv, London and Singapore, we also embrace ahybrid working culture. This flexibility allows us to tap into a diverse talent pool and enables our team members to work in a way that suits their individual preferences and circumstances.

Claroty is an equal-opportunity employer committed to fostering a diverse and inclusive work environment for all. We encourage applications from candidates of ALL diverse backgrounds, and special accommodations are available upon request in all selection phases.

Expected compensation for the role is between $200,000-$220,000. This is a good faith estimate but does not include equity, bonus, or other forms of payment. Pay will be by experience level, but those outside the salary band are welcome to apply.

While we believe competitive compensation is a critical aspect of your decision to join us, we do hope you also spend time considering why our mission and culture are right for you. We are creating something amazing here, and we hope you are as excited about the future as we are.

You’re more than welcome to follow us on social media:

Gartner, Magic Quadrant for CPS Protection Platforms, Katell Thielemann, Wam Voster, Ruggero Contu, 12 February 2025

Gartner does not endorse any vendor, product or service depicted in our research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally, and MAGIC QUADRANT is a registered trademark of Gartner, Inc. and/or its affiliates and are used herein with permission. All rights reserved.