Information Systems Security Manager

Entegee; Richardson (TX); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical, dental, vision

401K plan

Paid leave

Job summary

Entegee seeks an experienced ISSM to lead cybersecurity for DoD classified systems in Richardson, TX. The role requires active DoD Secret clearance on day one and IAM Level III compliant credentials.

A Master’s degree in cybersecurity, CS, or related field is preferred with 8+ years of relevant experience or an advanced degree with 5+ years. The candidate will own cybersecurity for assigned systems, serve as the primary authority for inspections and continuous monitoring, and drive RMF/JSIG/DAAG

Qualifications

• Active DoD Secret clearance required on day one.
• IAM Level III certification compliant with DoD 8570/8140 (e.g., CISSP/CISM/GSLC).
• Master’s degree or advanced degree with 5–8+ years of relevant experience.

Responsibilities

• Independently own cybersecurity responsibilities for assigned information systems, ensuring security objectives and risk management.
• Serve as primary cybersecurity authority for inspections, assessments, audits, and continuous monitoring to maintain authorization and readiness.
• Lead RMF/JSIG/DAAG activities and coordinate with stakeholders across the program.
• Mentor ISSOs and oversee RMF artifacts, POA&Ms, and CCB processes.
• Prepare cybersecurity status reports for senior leadership.

Skills

Security clearance day one

IAM Level III compliant

Travel up to 20%

Education

Master’s degree in Cybersecurity/CS/related field

Bachelor’s degree with 8+ years experience

Tools

RMF

JSIG

DAAG

DD Form 254 interpretation

Job description

• Active DOD Secret Security Clearance day one.
• IAM Level III certification compliant with DoD 8570 / DoD 8140 (e.g., CISSP, CISM, GSLC).
• Typically requires University Degree and minimum of 8 years prior relevant experience or an Advanced Degree in a related field and minimum 5 years.
• Experience performing ISSM responsibilities for classified or controlled information systems.
• Advanced knowledge of RMF and DoD system authorization processes.
• Experience executing authorization and continuous monitoring using JSIG and/or DAAG.
• Knowledge of cybersecurity regulations, contractual requirements, and DD Form 254 interpretation.
• Experience supporting inspections, assessments, and audit activities.
• Ability to independently assess risk and communicate cybersecurity status to leadership.Must be willing to travel domestically up to 20%, generally supporting other company facilities.
• Master’s degree in Cybersecurity, Computer Science, or a related field.
• Experience as the primary ISSM for SAP and/or DoD collateral systems.
• Experience owning ATOs and driving POA&M closure.
• Experience mentoring ISSOs and providing technical oversight.
• Experience leading Change Control Boards (CCBs).
• Experience working with cross-functional teams and enterprise cybersecurity organizations.

Job Responsibilities:

• Independently own cybersecurity responsibilities for assigned information systems, ensuring security objectives are achieved and organizational risk is effectively managed.
• Serve as the primary cybersecurity authority for inspections, assessments, audits, and continuous monitoring, leading preparation, execution, and response activities to maintain authorization and inspection readiness.
• Execute and maintain system authorization using the Risk Management Framework (RMF) and applicable guidance, including the Joint Special Access Program Implementation Guide (JSIG) for Special Access Program systems and the DCSA Assessment and Authorization Guide (DAAG) for DoD collateral systems.
• Maintain awareness and working knowledge of DD Form 254s and contractual security requirements, ensuring cybersecurity controls, inspection scope, and authorization boundaries align with approved mission and program objectives.
• Develop, maintain, and validate cybersecurity plans, authorization artifacts, and compliance documentation to support audit-ready operations.
• Identify, assess, and communicate cybersecurity risk to senior leadership and Authorizing Officials, including the impact of system changes, vulnerabilities, inspection findings, and authorization conditions.
• Lead continuous monitoring activities, including evaluation of security posture, validation of control effectiveness, and tracking of security-relevant data.
• Develop, manage, and drive closure of Plans of Action and Milestones (POA&Ms) resulting from inspections, assessments, and continuous monitoring activities.
• Lead and oversee cybersecurity Change Control Boards (CCBs), evaluating proposed system changes for security impact, authorization implications, and alignment with RMF requirements.
• Execute or coordinate corrective and protective security actions resulting from inspections, continuous monitoring, or identified cybersecurity incidents.
• Engage with Program Managers to integrate cybersecurity requirements into program execution, schedules, and decision-making, and to address risk impacts to cost, scope, and mission delivery.
• Collaborate with cross-functional teams, including Information Technology, Facilities, and Industrial Security, to ensure cybersecurity requirements are integrated into technical, physical, and operational environments.
• Coordinate with other cybersecurity teams across the enterprise to ensure consistent implementation of cybersecurity processes, standards, and authorization practices.
• Provide technical direction and mentoring to ISSOs to ensure consistent execution of RMF activities, inspection readiness, and quality of authorization artifacts, while remaining accountable for cybersecurity outcomes.
• Prepare and deliver cybersecurity status reporting to senior leadership, summarizing authorization posture, inspection readiness, risk trends, POA&Ms, and significant cybersecurity issues.

#GRPC

Equal Opportunity Employer/Veterans/Disabled

Benefit offerings include medical, dental, vision, term life insurance, short-term disability insurance, additional voluntary benefits, commuter benefits and 401K plan. Our program provides employees the flexibility to choose the type of coverage that meets their individual needs. Available paid leave may include Paid Sick Leave, where required by law; any other paid leave required by Federal, State or local law; and Holiday pay upon meeting eligibility criteria. Disclaimer: These benefit offerings do not apply to client-recruited jobs and jobs which are direct hire to a client

To read our Candidate Privacy Information Statement, which explains how we will use your information, please visit https://www.entegee.com/candidate-privacy-information-statement/

The Company will consider qualified applicants with arrest and conviction records.