Information Systems Security Manager ISSM

Kms-Solutions,-LL; Alexandria (VA); On-site; USD 130,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

401k / retirement savings plan

Paid time off (PTO)

Paid holidays

Tuition reimbursement

Life insurance

Job summary

KMS Solutions, LLC is seeking an Information Systems Security Manager (ISSM) to provide senior cybersecurity leadership and RMF support for PMS 340 systems. The role requires DoD RMF experience, documentation oversight, and collaboration with NAVSEA, NSW, and other stakeholders.

The ISSM will manage accreditation artifacts, perform risk assessments, and guide cybersecurity engineering across undersea, maritime, surface, air, and expeditionary technologies. A Secret DoD clearance is required.

Qualifications

• Bachelor’s degree in cybersecurity, information systems, engineering, mathematics, or related discipline.
• DoD RMF experience and a DoD 8570.01M IAT/IAM certification (e.g., Security+).
• Experience using RMF, A&A processes, and CYBER validation of DoD IT systems.

Responsibilities

• Lead RMF accreditation package development for PMS 340 systems.
• Oversee SSPs, POA&Ms, validation procedures, and risk assessments.
• Coordinate cybersecurity activities across NAVSEA, NSW, SOCOM, and stakeholders.
• Prepare cybersecurity reports and briefs for PMO leadership.
• Support vulnerability management and cybersecurity testing activities.

Skills

Strong communication

Attention to detail

Independent workstyle

Education

Bachelor’s degree in cybersecurity, information systems, engineering, mathematics, or related discipline

Master’s degree in cybersecurity, information systems, or engineering

Tools

eMASS

ACAS

SCAP

Nmap

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Information Systems Security Manager ISSM

Full-Time Regular Alexandria, VA, US

Salary Range: $130,000.00 To $160,000.00 Annually

Information Systems Security Manager (ISSM)

Company Overview:

KMS Solutions, LLC is a technical management / solutions company that specializes in engineering, analysis, and cyber security. Founded in 2005, KMS is a certified small business with nearly two decades of experience supporting the Department of Defense as well as many other departments and programs critical to our Nation’s security and well-being.

KMS is a three-time winner of the USA Today Top Workplaces recognizing quality workplace cultures across the United States who put their employees first. Additionally, KMS has won multiple regional Top Workplaces awards and Culture Excellence Awards for Compensation & Benefits, Innovation, Leadership, Purpose & Values and Work-Life Flexibility.

Position Summary

KMS solutions, LLC is seeking a highly motivated individual for an Information Systems Security Manager (ISSM) position providing senior-level cybersecurity leadership, oversight, and Risk Management Framework (RMF) support to the Naval Special Warfare (NSW) and expeditionary systems managed by PMS 340. PMS 340’s mission encompasses manned and unmanned undersea systems, surface systems, air operations, visual augmentation systems, small arms, diving systems, and Special Operations Forces (SOF) maritime capabilities. The ISSM will serve as the cybersecurity authority for PMS 340, responsible for system accreditation, cybersecurity engineering, vulnerability management, and ensuring compliance with DoD, DoN, NAVSEA, NIST, and CNSSI cybersecurity requirements.

Essential Functions

Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions.

• Lead development, maintenance, and submission of RMF accreditation packages for PMS 340 systems, ensuring compliance with DoD, DoN, NAVSEA CS‑DoN SOPs, and business rules.
• Oversee cybersecurity documentation including SSPs, POA&Ms, validation procedures, and risk assessments, ensuring systems meet information assurance and security requirements.
• Conduct and oversee security control assessments in accordance with NIST SP 800‑53, 800‑53A, CNSSI 1253, and RMF requirements.
• Perform and direct vulnerability assessment and compliance reviews using ACAS, SCAP, and Nmap for PMS 340 systems.
• Manage cybersecurity workflows and accreditation artifacts using eMASS.
• Support cybersecurity Test & Evaluation phases including cooperative vulnerability identification, adversarial testing, penetration assessments, and adversarial assessments.
• Identify and mitigate cybersecurity risks across PMS 340 systems; ensure risk treatment, compliance, and monitoring throughout the system lifecycle.
• Coordinate cybersecurity activities across NAVSEA, NSW, SOCOM, NUWC, and other stakeholders, supporting IPTs, Working Groups, and program reviews.
• Prepare cybersecurity reports, briefs, and documentation, clearly articulating cybersecurity requirements to PMO leadership and technical teams.
• Provide cybersecurity guidance, engineering support, and subject matter expertise for PMS 340 systems, including undersea, maritime, surface, air, and expeditionary technologies.
• Support PMS 340 leadership in ad hoc cybersecurity meetings and engagements, including those requiring travel.

Required Education and Experience

• Bachelor’s degree in cybersecurity, information systems, engineering, mathematics, or related discipline.
• Minimum 5 years of cybersecurity or RMF-based experience supporting DoD systems.
• DoD 8570.01M IAT/IAM Level II or III certification (e.g., Security+).
• Operating Systems certification (Windows or Linux).
• Experience with RMF, A&A processes, and cybersecurity validation of DoD IT systems.
• Experience using eMASS.
• Equivalent combinations of education and experience will be considered.

Preferred Education and Experience

• Master’s degree in cybersecurity, information systems, or engineering.
• 6–8+ years of cybersecurity experience supporting DoD or Navy cybersecurity programs (NSW/SOF or undersea systems preferred).
• Experience with NIST RMF, Navy cybersecurity policy, and DIACAP-to-RMF transitions.
• Systems engineering or system integration experience.
• Proficiency in Microsoft Office, specifically, Word, Excel, PowerPoint, and Outlook software.
• Excellent verbal and written communication skills; ability to clearly articulate technical requirements.
• Ability to independently perform cybersecurity assessments and analyses.
• Thoroughness, attention to detail, and disciplined documentation habits.
• Ability to work collaboratively across engineering, acquisition, and cybersecurity teams.
• Must be highly reliable and demonstrate personal initiative to operate in a fast‑paced environment with changing priorities.

Additional Eligibility Requirements

Work Authorization/Security Clearance Requirement

• This position requires the ability to obtain and/or maintain a Secret DoD Security Clearance and required access to all worksite locations. Security clearances may only be granted to U.S. citizens.
• Legally authorized to work in the United States at the time of hire and throughout employment.

Other Duties:

Please note this job posting is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

Supervisory Responsibility:

None

This job operates in a professional office environment. This role routinely uses standard office equipment such as computers, phones, and photocopiers.

Physical Demands:

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.

While performing the duties of this job, the employee is regularly required to talk and hear. The employee is frequently required to stand, walk, use hands to finger, handle or feel, and reach with hands and arms. Must be able to lift up to 20 lbs.

Position Type/Expected Hours of Work:

The typical workday is eight hours in length. Some flexibility in hours is allowed, with concurrence from the supervisor. Attendance at mandatory meetings is required. Must be available during the core work hours as determined by the contract/location and must account for the required number of hours in a pay period to maintain Full-time status.

Telework:

• Telework may be allowed up to 60%.
• Subject to change based on business needs and customer requirements.

Travel:

• Ability to travel CONUS; potential to travel OCONUS.
• Travel up to 10% may be required.

Benefits and Additional Compensation:

• medical, dental and vision insurances
• flexible spending account
• PTO
• paid holidays
• military leave
• bereavement leave
• 401k / retirement savings plan
• professional development and tuition reimbursement
• basic and voluntary life insurance / AD&D
• short-term and long-term disability
• voluntary AFLAC supplemental insurance products and employee assistance plan (EAP) program
• KMS offers employee referral bonuses and a discretionary annual bonus.

AAP/EEO Statement:

KMS Solutions is an Equal Employment Opportunity Employer and maintains an Affinity Action Program. We recruit, employ, train, compensate, and promote qualified individuals without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, age, genetic information, or any other protected status under applicable federal, state, or local laws. Applicants or employees needing a reasonable accommodation during the application or interview process should contact Human Resources.