Information Systems Security Manager (ISSM)

Socket.dev; Torrance (CA); On-site; USD 95,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision fully paid

Job summary

Opto-Knowledge Systems, Inc. (OKSI) seeks an ISSM to own the cybersecurity compliance program end-to-end, directing our CMMC posture and NIST 800-171/DFARS 7012 compliance.

You will build and enforce policies and guide IT infrastructure decisions with the security team. You will lead internal security audits, drive remediation, and partner with every department to meet operations without compromising compliance.

Qualifications

• Hands-on experience building or managing a CMMC compliance program.
• Strong knowledge of DFARS 7012 and NIST 800-171 control families and audit documentation.
• Active DoD clearance (Secret or higher).
• 5+ years in cybersecurity compliance, IT security, or related field.

Responsibilities

• Direct OKSI's cybersecurity program end-to-end, aligning with DFARS 7012 and NIST 800-171.
• Develop, maintain, and enforce security policies, SSPs, POA&Ms, and baselines.

Skills

CMMC compliance

DoD DFARS 7012

NIST 800-171

Security governance

Education

Bachelor's degree in CS/IS/Cybersecurity

DoD 8570.01 certification

Tools

Microsoft 365

AzureAD

Intune

Fortinet

Linux

Windows

Job description

About OKSI

Opto-Knowledge Systems, Inc. (OKSI) designs and builds EO/IR sensor systems, autonomous platforms, and modeling and simulation technology that give warfighters a decisive edge. We're a small, fast-moving team where your work reaches the field in months, not years.

Why OKSI

• Own the whole stack, not one slice of it. Lead compliance strategy and infrastructure decisions from day one.
• See your work protect people, fast. The systems you secure support seekers, guidance kits, and autonomy hardware fielded in months, not years.
• A mission that matters. Our work gives warfighters a decisive edge and helps drive down the cost of defending the nation.
• Speed and agility. Small teams, direct access to leadership, no process bottlenecks slowing you down.
• Grow as we grow. OKSI is expanding, which means faster-than-typical opportunities to build and lead a growing security function.
• A flexible, supportive environment. A culture that expects excellence while genuinely investing in the people who deliver it.

The Role

The ISSM owns OKSI's cybersecurity compliance program end to end, directing our CMMC posture and NIST 800-171/DFARS 7012 compliance, building and enforcing the policies and procedures that keep us audit-ready. You'll also guide IT infrastructure decisions and lead the IT team, though the core of this role is compliance strategy and governance.

What You'll Do

• Direct OKSI's CMMC program, ensuring ongoing alignment with DFARS 7012 and NIST 800-171
• Build, maintain, and enforce security policies, procedures, and documentation (SSPs, POA&Ms, control baselines)
• Lead internal security audits, identify gaps, and drive remediation to closure
• Guide IT team priorities and provide strategic direction on infrastructure and security decisions
• Partner with every department to meet operational needs without compromising compliance
• Lead companywide cybersecurity training and awareness efforts
• Run continuous monitoring and threat detection through SIEM tooling
• Oversee network and systems administration, Microsoft 365/AzureAD/Intune, and Linux/Windows baselines (in partnership with IT staff)
• Manage vendors and evaluate new technology for secure, compliant integration

Requirements

What You'll Need

• Hands-on CMMC experience: building, maintaining, or assessing a CMMC compliance program
• Strong command of DFARS 7012 and NIST 800-171 control families, policy development, and audit documentation (SSPs, POA&Ms)
• Active DoD clearance (Secret or higher)
• 5+ years of experience in cybersecurity compliance, IT security, or a related field

Nice to Have

• Prior defense industry or DoD contractor experience
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field
• DoD 8570.01 certification (IAT Level II or higher, e.g., Security+, CISSP)
• Experience with Microsoft 365, AzureAD, Intune, or Fortinet technologies
• Experience administering Linux and Windows systems

Compensation and Benefits

• $95,000 - $180,000 annually. New hires are typically brought into the organization at a salary between the range minimum and the salary range midpoint depending on qualifications and the budget allocated for this role.
• Medical, dental, vision fully paid by the employer for the employee
• Three weeks vacation
• Automatic company contribution to 401K - 5% of earned wages (no matching required)
• Educational assistance

ITAR Requirements

• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C.
• 1157, or (iv) Asylee under 8 U.S.C.
• 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

We are an equal employment opportunity and affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected by law. We provide reasonable accommodations for qualified individuals with disabilities in the application and hiring process.

This employer participates in E-Verify.