Information Systems Security Manager (ISSM)

MedStar Health; Laurel (MD); On-site; USD 100,000 - 150,000; Full time

Job summary

MedStar Health is seeking an Information Systems Security Manager to lead cybersecurity compliance efforts for Department of Defense systems. This role demands extensive experience in information assurance and management of security protocols. The ISSM will develop processes for maintaining compliance, manage risks, and serve as the liaison between various cybersecurity stakeholders. A Bachelor’s degree in a related field and active security clearance are essential for candidates.

Benefits

Health, dental, and vision insurance

Generous paid time off

Retirement plan with immediate match

Tuition reimbursement

Life and disability insurance

Qualifications

• Must hold an active DoD Top Secret Clearance and be SCI eligible.
• 8+ years in Information Assurance or Cybersecurity roles.
• 3+ years as an ISSM or equivalent leadership role.

Responsibilities

• Manage and maintain cybersecurity posture for classified systems.
• Ensure compliance with DoD cybersecurity directives.
• Conduct independent risk assessments and audits.

Skills

Risk Management Framework (RMF)

Cybersecurity Compliance

Incident Response

Forensics Investigations

Access Control

Education

Bachelor's degree in Cybersecurity, Computer Science, or IT

Tools

Xacta

eMASS

ACAS

HBSS

Splunk

Job description

Consulting Services Group (CSG) is a premier provider of support services, bringing a new and unique level of subject matter expertise to our clients. Our innovation-led services provides comprehensive solutions to our clients who face high-stake challenges related to managing essential programs, growth and transformation, critical communications, and logistics. Our people bring unparalleled expertise and dedication, and we are always looking to expand our team.

Consulting Services Group (CSG) is hiring a highly skilled Information Systems Security Manager (ISSM) to support a mission-critical program. This position plays a pivotal role in the implementation, management, and oversight of information assurance and cybersecurity compliance for Department of Defense (DoD) information systems.

The ISSM will ensure all systems under their responsibility comply with DoD cybersecurity directives and will serve as the primary liaison between cybersecurity operations, program management, and government security stakeholders.

Duties/Tasks and Responsibilities:

• Developing processes and protocols for storing information, making it accessible, controlling access, and capturing new knowledge.
• Ability to lead or participate in cyber incident response and forensics investigations.
• Oversee and coordinate system Authorization to Operate (ATO) and Interim Authorization to Test (IATT) activities.
• Oversee various initiatives involving Operating Authority (OA) activities that can be conducted independently of an ATO process.
• Conduct independent risk assessments and guide others through the process to ensure stakeholders are able to make risk-informed decisions.
• Manage and maintain the cybersecurity posture of classified information systems in accordance with DoD, NIST, and USCYBERCOM security requirements.
• Develop, implement, and maintain system security plans (SSPs), risk assessments, and contingency plans.
• Ensure compliance with the Risk Management Framework (RMF) process and manage all phases of the RMF lifecycle.
• Conduct regular audits and assessments to identify system vulnerabilities, ensure Security Technical Implementation Guides (STIGs) compliance, and remediate findings.
• Collaborate with Information System Owners (ISOs), Information System Security Officers (ISSOs), and other stakeholders to maintain security controls and incident response readiness.
• Support the integration of cybersecurity requirements into system design, development, and implementation activities.
• Interface with government representatives, including Authorizing Officials (AOs) and Security Control Assessors (SCAs), to provide updates and obtain approvals.
• Provide cybersecurity training, awareness, and mentoring to users and junior personnel.

Education:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.

Minimum Qualifications:

• Must be a U.S. Citizen
• Must hold an active Department of Defense Top Secret Clearance and be SCI eligible with active Counterintelligence (CI) Polygraph.
• 8+ years of experience in Information Assurance or Cybersecurity roles, with 3+ years as an ISSM or equivalent leadership role.
• In-depth knowledge of the Risk Management Framework (RMF), NIST SP 800-53, DoD Instruction 8510.01, and DISA STIGs.
• Experience supporting classified DoD or IC programs.
• One or more of the following certifications (DoD 8570 IAM Level III required): CISM, CISSP (or Associate), GSLC, or CCISO.

Desired Skills:

• Prior experience supporting military cyber programs.
• Familiarity with Xacta, eMASS, or other RMF documentation tools.
• Hands-on technical experience with security engineering tools such as ACAS, HBSS, and Splunk.

Job location: In the vicinity of Laurel, MD, remote telework is not available.

Other:

Work Environment

• This is a full-time position working normal workday hours, Monday to Friday, with weekends and holidays off.

Travel:

• Occasional local travel in the Maryland and Washington, D.C. metropolitan area may be required to support mission objectives and system assessments.

Compensation and Benefits:

We provide compensation commensurate with experience and qualifications.

We are proud of the benefits that we offer! In addition to a competitive salary, we provide no cost health, dental, and vision insurance options for our employees. Our paid time off is a generous accrual program with additional time off for sick leave for you or your dependents wellbeing and paid military leave. Our 14 holidays allow our staff the flexibility to take alternative days off throughout the year. Employees also benefit from a retirement plan with immediate match and vesting. Additionally, we offer life and disability insurance, tuition reimbursement, and a rich employee referral program.

We are honored to have been recognized as a USA TODAY Top Workplace for 2025. The strong culture that we have built - one that prioritizes work life balance, employee appreciation, strong values, and meaningful work, contributes to an environment where CSG employees feel valued and supported.

Application:

Applications will be reviewed on a rolling basis. Please let us know if you require accommodations during the application or interview process by reaching us at 540-751-3215.

Consulting Services Group, LLC is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, or protected veteran status and will not be discriminated against on the basis of disability. For more information, see Equal Employment Opportunity. We recognize that people come with a wealth of experience and talent beyond just the technical requirements of a job, therefore our job descriptions are guidelines, not hard and fast rules. Your experience helps build the competencies and knowledge that translates to our openings.