Information Systems Security Manager

M.C. Dean; Virginia, Tysons (MN, VA); On-site; USD 100,000 - 150,000; Full time

Job summary

M.C. Dean is seeking an Information System Security Manager to lead cybersecurity efforts across critical systems. This role requires extensive experience in cybersecurity frameworks, strong leadership skills, and the ability to develop and implement security policies. The ISSM will collaborate with various teams to enhance security measures and ensure compliance while managing resources effectively.

Qualifications

• 10+ years in cybersecurity frameworks with expert knowledge.
• 5+ years in cybersecurity management roles.
• Proficiency with IT concepts and security technologies.

Responsibilities

• Lead the creation and improvement of security policies.
• Identify and mitigate cybersecurity risks.
• Manage resources and support cybersecurity capabilities.

Skills

Cybersecurity frameworks

Risk management

Policy development

Communication skills

Cross-functional collaboration

Education

Bachelor's Degree

Master's Degree

CISSP or equivalent certification

Tools

NIST RMF

CMMC

ISO 27001

Job description

Overview

Your Future at M.C. Dean

We're seeking driven individuals passionate about excellence and impactful work in powering, automating, integrating, and securing critical infrastructure and facilities. Join over 5,800 professionals engineering and deploying secure, resilient power and technology systems, and managing platforms for sustainable system operation. Together, we innovate in designing, delivering, and maintaining complex systems to enhance client outcomes, improve lives, and positively change the world.

The Information System Security Manager (ISSM) is responsible for developing, implementing, and continuously improving cybersecurity functions across multiple critical systems. The ISSM provides strategic and tactical leadership to cybersecurity staff, including Security Officers and analysts.

Responsibilities

1. Security Program Leadership: Collaborate with the Facility Security Officer and leadership to establish and maintain cybersecurity accreditation and authorization for enterprise and customer systems.
2. Policy Development: Lead the creation and ongoing improvement of security policies, standards, and procedures to ensure compliance and effective business operations.
3. Risk Management: Identify, assess, and mitigate cybersecurity risks; oversee system monitoring, threat intelligence, vulnerability management, incident response, and awareness initiatives.
4. Incident Investigation: Lead investigations into security violations and incidents, reporting findings to relevant stakeholders.
5. Team Collaboration: Coordinate among cybersecurity, infrastructure, and development teams to implement controls and secure development practices.
6. Organizational Leadership: Manage resources, develop expertise, and support cybersecurity capabilities aligned with strategic goals.
7. Stakeholder Engagement: Maintain relationships with security officials, assessment bodies, and internal teams; oversee audit and assessment activities.
8. Reporting: Provide regular updates on security posture, incidents, and strategic initiatives to company leadership.

Qualifications

• 10+ years in cybersecurity frameworks (RMF, CMMC, ISO 27001, etc.), with expert knowledge of NIST RMF and standards.
• 5+ years in cybersecurity management roles, including policy development, audits, and assessments.
• Proficiency with IT concepts, platforms, security technologies, and compliance tools.
• Knowledge of encryption, PKI, and security benchmarks.
• Strong communication skills and ability to work cross-functionally.

Education and Certifications

• Bachelor's Degree (10+ years of experience) or Master's Degree (7+ years), in relevant fields.
• CISSP or equivalent certification.
• Active TS/SCI clearance.

Abilities

• Ability to work with screens for extended periods, sit for long durations, and manipulate objects with fingers.
• Effective listening, speaking, reading, and problem-solving skills.