Information Systems Security Manager

Phase2 Technology; Honolulu (HI); On-site; USD 86,900 - 198,000; Full time

Job summary

Booz Allen Hamilton seeks a Senior Information Systems Security Manager to own RMF oversight for DoW systems across their lifecycle. You will categorize systems, tailor controls, oversee assessments, and drive authorization in eMASS, coordinating with AO/AODR/SCAs and leadership.

Demonstrated 8+ years in cybersecurity compliance, DoD RMF, and a TS/SCI clearance are required. Bachelor’s degree and IAM Level III certification are mandatory; leadership experience preferred.

Qualifications

• 8+ years in cybersecurity compliance or IT security operations
• Experience as ISSM/ISSO or RMF authorization on DoD/DoW systems
• Experience managing RMF Steps 1-6 and Continuous Monitoring
• Experience with eMASS including authorization package development and POA&M management
• Experience supervising ISSOs or junior compliance staff
• Experience preparing systems for and supporting compliance audits/inspections

Responsibilities

• Own RMF oversight end-to-end across lifecycle for DoW systems
• Manage RMF steps 1-6 and continuous monitoring
• Supervise and mentor ISSOs, assign control families, review work
• Coordinate with AO, AODR, SCA and leadership to resolve findings
• Maintain documentation standards and artifact management; train staff

Skills

RMF / NIST 800-37

ISSM responsibilities

eMASS experience

supervising ISSOs

risk communication

TS/SCI

Education

Bachelor's degree

DoD 8570/8140 IAM Level III

Tools

eMASS

Job description

Job Number: R0245629

Information Systems Security Manager

The Opportunity:

Department of War (DoW) information systems require continuous, disciplined oversight to stay authorized to operate and defensible against evolving threats. As a Senior Information System Security Manager (ISSM), you will own that oversight - serving as the principal cybersecurity authority for one or more system authorization packages across their full lifecycle.

You’ll manage the RMF process end-to-end: categorizing systems, selecting and tailoring controls, overseeing assessment and authorization activities, and maintaining continuous monitoring posture after ATO. You’ll supervise a team of ISSOs, assigning control families, reviewing their work, and consolidating it into authoritative packages in eMASS. You’ll coordinate directly with Authorizing Officials (AO), Authorizing Official Designated Representatives (AODR), Security Control Assessors (SCA), and program leadership to resolve findings, manage POA&M(s), and drive packages to authorization on schedule.

This role combines technical depth in NIST SP 800-53/800-37/800-137 with the leadership to run a compliance program: you’ll set standards for documentation and artifact management, train and mentor ISSOs, and represent the security posture of your systems to senior stakeholders.

Join us. The world can't wait.

You Have:

• 8+ years of experience in cybersecurity compliance, information assurance, or IT security operations

• Experience serving as an ISSM, ISSO, or RMF authorization role on DoD/DoW systems

• Experience managing RMF Steps 1-6: Categorize through Authorize, and Step 7: Continuous Monitoring

• Experience with eMASS, including authorization package development, control implementation statements, POA&M management, and artifact and evidence management

• Experience supervising or mentoring ISSOs or junior compliance staff

• Experience preparing systems for and supporting compliance audits, inspections, or assessments

• Ability to communicate security risk and compliance status clearly to senior leaders, AOs, and SCAs

• TS/SCI clearance

• Bachelor's degree

• DoD 8570/8140 IAM Level III certification

Nice If You Have:

• Experience with defense or national security issues in a specific theater or combatant command environment

• Experience working at a DoD/DoW Command-level Headquarters

• Experience with CNSSI 1253, NIST SP 800-53B, and DoD-specific overlays

• Experience developing internal SOPs, naming conventions, or governance frameworks for artifact and control management

• Experience with system boundary changes, categorization changes, or reauthorization packages

• Experience hiring, interviewing, or building out a compliance team

• Knowledge of cloud-hosted DoD systems, such as AWS, Azure, or GCP

• Master's degree

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $86,900.00 to $198,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date.

Identity Statement

As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

Candidate AI Usage Policy

AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.

Work Model

Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.

• Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.

• Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.

• Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.