Information Systems Security Administrator (ISSA)

MSI Defense Solutions; Mooresville (NC); Hybrid; USD 70,000 - 90,000; Full time

Benefits offered by this job

401(k) with employer match

Health Insurance

Paid Time Off - 120 hours per year

Job summary

MSI Defense Solutions seeks an Information Systems Security Administrator to oversee security and compliance of information systems. The role requires supporting cybersecurity controls per frameworks like CMMC and NIST, monitoring systems for vulnerabilities, and assisting with system audits.

The ideal candidate should have a Bachelor's degree in IT or Cybersecurity and 3+ years of relevant experience. This full-time position offers a hybrid work model and a range of benefits including health insurance and a 401(k) plan.

Qualifications

• 3+ years of experience in system administration, cybersecurity, or compliance-focused IT roles.
• Working knowledge of cybersecurity frameworks (CMMC, NIST 800-171, NIST 800-53).
• Ability to obtain and maintain a U.S. Government security clearance.

Responsibilities

• Support implementation of cybersecurity controls aligned with CMMC, NIST 800-171.
• Monitor systems for security events, vulnerabilities, and compliance gaps.
• Assist with incident response activities, including investigation and reporting.

Skills

System administration

Cybersecurity

Compliance management

Attention to detail

Effective communication

Problem solving

Education

Bachelor's degree in Information Technology or Cybersecurity

Tools

Microsoft 365

Azure AD

Microsoft Intune

SIEM platforms

Job description

Position Overview

The Information Systems Security Administrator (ISSA) is responsible for supporting the security, compliance, and operational integrity of organizational information systems. This role bridges IT operations and cybersecurity, ensuring systems are configured, monitored, and maintained in accordance with regulatory frameworks such as CMMC, NIST 800‑171, and organizational security policies. This role is critical to maintaining the organization's cybersecurity posture and regulatory compliance, ensuring protection of Controlled Unclassified Information (CUI) and supporting mission‑critical operations. The ISSA will report to the Digital Technology Manager. The position requires a full‑time work week spent in the office or hybrid with 3 days onsite. Normal hours are Monday through Thursday 7:00am‑4:30pm and Friday 7:00am‑12:00pm. (Must be flexible to work additional hours as needed based on project requirements and deadlines.)

Key Responsibilities

• Support implementation and maintenance of cybersecurity controls aligned with CMMC, NIST 800‑171, and other applicable frameworks
• Monitor systems and environments for security events, vulnerabilities, and compliance gaps
• Assist in maintaining system security plans (SSP), policies, procedures, and supporting documentation
• Administer user access controls, account provisioning/deprovisioning, and least privilege enforcement
• Support endpoint and mobile device management (e.g., Microsoft Intune, MAM/MDM policies)
• Assist with incident response activities, including investigation, containment, and reporting
• Conduct routine system audits, vulnerability scans, and remediation tracking
• Ensure secure configuration, patching, and hardening of systems and applications
• Support implementation and monitoring of MFA, encryption, and data protection controls
• Collaborate with IT and business units to ensure secure system integrations and operations
• Assist with third‑party/vendor security reviews and compliance requirements
• Support internal and external audits, assessments, and C3PAO readiness efforts

Skills And Qualifications Required

• Bachelor's degree in Information Technology, Cybersecurity, or related field (or equivalent experience)
• 3+ years of experience in system administration, cybersecurity, or compliance‑focused IT roles
• Working knowledge of cybersecurity frameworks (CMMC, NIST 800‑171, NIST 800‑53)
• Experience with Microsoft 365 (GCC preferred), Azure AD, and endpoint management tools (Intune)
• Familiarity with vulnerability management, patching processes, and system hardening
• Understanding of access control, authentication (MFA), and identity management
• Strong attention to detail and compliance mindset
• Ability to balance security requirements with operational needs
• Effective communication across technical and non‑technical teams
• Proactive problem‑solving and continuous improvement approach with documentation and organizational skills
• U.S. citizenship is required. Candidates must be eligible to obtain and maintain a U.S. Government security clearance, if required for the position.

Preferred Qualifications

• Experience supporting CMMC Level 2 environments or similar regulated environments
• Familiarity with tools such as Microsoft Defender, SIEM platforms, and compliance tools (e.g., IntelliGRC)
• Relevant certifications (Security+, CySA+, CISSP, or similar)
• Experience with audit preparation and evidence collection

Physical Requirements

• Prolonged periods sitting at a desk and working on a computer
• Must be able to lift up to 30 pounds at times.
• Must be able to access and navigate each department at the organization's facilities.

Benefits

• 401(k) with employer match
• Dental Insurance
• Disability Insurance
• Health Insurance
• Vision Insurance
• Paid Parental and Maternity Leave
• Life Insurance
• Paid Time Off - 120 hours per year to start (prorated in first year of employment)
• Continuing Education
• Annual Year End Paid Holiday Closure

Classification

Position is full‑time, Exempt

MSI Defense Solutions is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, age, marital status, political affiliation, sexual orientation, gender identity, genetic information, disability or protected veteran status. We are committed to providing a workplace free of any discrimination or harassment.