Information Systems Security Manager (ISSM)

OKSI; Torrance, Northern (CA, KY); Hybrid; USD 95,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision fully paid

Three weeks vacation

401K 5% employer contribution

Educational assistance

Job summary

OKSI in Torrance, CA seeks an ISSM to own the cybersecurity compliance program end to end, directing CMMC posture and NIST 800-171/DFARS 7012 compliance, while guiding IT infrastructure decisions and leading the IT team. You will build policies, run internal audits, manage vendor assessments, and drive continuous monitoring with SIEM tools to ensure audit readiness.

The role requires 5+ years in cybersecurity compliance, active DoD clearance, and a related bachelor's degree; DoD 8570

Qualifications

• Hands-on CMMC experience building, maintaining, or assessing a compliance program.
• Strong knowledge of DFARS 7012 and NIST 800-171 control families, policy development, and audit documentation.
• Active DoD clearance (Secret or higher).
• 5+ years of experience in cybersecurity compliance or IT security.

Responsibilities

• Direct OKSI's CMMC program, ensuring alignment with DFARS 7012 and NIST 800-171.
• Build, maintain, and enforce security policies, procedures, and documentation (SSPs, POA&Ms).
• Lead internal security audits, identify gaps, and drive remediation to closure.
• Guide IT priorities and provide strategic direction on infrastructure and security decisions.
• Partner with all departments to meet operations without compromising compliance.
• Lead companywide cybersecurity training and awareness efforts.
• Run continuous monitoring and threat detection through SIEM tooling.
• Oversee network and systems administration (M365/AzureAD/Intune, Linux/Windows).
• Manage vendors and evaluate secure, compliant tech integrations.

Skills

CMMC

NIST 800-171

DFARS 7012

DoD clearance

Governance

Education

Bachelor's degree in CS/IS/Cybersecurity

Tools

Microsoft 365

AzureAD

Intune

Fortinet

Linux/Windows

Job description

Description

About OKSI

Opto-Knowledge Systems, Inc. (OKSI) designs and builds EO/IR sensor systems, autonomous platforms, and modeling and simulation technology that give warfighters a decisive edge. We're a small, fast-moving team where your work reaches the field in months, not years.

Why OKSI?

• Build next-generation defense technology. Our engineering work protects warfighters, reduces collateral damage, and safeguards civilians.
• Speed and Accuracy We move quickly, and you'll see your work through from concept to deployment — not just one slice of the pipeline; no process bottlenecks we move with speed and agility !
• Hybrid schedule Working at OKSI provides you with a unique opportunity to see fruition of your work while still having a real work-life balance with our hybrid schedule options.
• Professional Growth . OKSI is expanding and growing, which means faster-than-typical opportunities to advance your career.

The Role

The ISSM owns OKSI's cybersecurity compliance program end to end, directing our CMMC posture and NIST 800-171/DFARS 7012 compliance, building and enforcing the policies and procedures that keep us audit-ready. You'll also guide IT infrastructure decisions and lead the IT team, though the core of this role is compliance strategy and governance.

What You'll Do

• Direct OKSI's CMMC program, ensuring ongoing alignment with DFARS 7012 and NIST 800-171
• Build, maintain, and enforce security policies, procedures, and documentation (SSPs, POA&Ms, control baselines)
• Lead internal security audits, identify gaps, and drive remediation to closure
• Guide IT team priorities and provide strategic direction on infrastructure and security decisions
• Partner with every department to meet operational needs without compromising compliance
• Lead companywide cybersecurity training and awareness efforts
• Run continuous monitoring and threat detection through SIEM tooling
• Oversee network and systems administration, Microsoft 365/AzureAD/Intune, and Linux/Windows baselines (in partnership with IT staff)
• Manage vendors and evaluate new technology for secure, compliant integration

Requirements

What You'll Need

• Hands-on CMMC experience: building, maintaining, or assessing a CMMC compliance program
• Strong command of DFARS 7012 and NIST 800-171 control families, policy development, and audit documentation (SSPs, POA&Ms)
• Active DoD clearance (Secret or higher)
• 5+ years of experience in cybersecurity compliance, IT security, or a related field

Nice to Have

• Prior defense industry or DoD contractor experience
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field
• DoD 8570.01 certification (IAT Level II or higher, e.g., Security+, CISSP)
• Experience with Microsoft 365, AzureAD, Intune, or Fortinet technologies
• Experience administering Linux and Windows systems

Compensation and Benefits

• $95,000 - $180,000 annually. New hires are typically brought into the organization at a salary between the range minimum and the salary range midpoint depending on qualifications and the budget allocated for this role.
• Medical, dental, vision fully paid by the employer for the employee
• Three weeks vacation
• Automatic company contribution to 401K – 5% of earned wages (no matching required)
• Educational assistance

ITAR Requirements

• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C.1157, or (iv) Asylee under 8 U.S.C.1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

We are an equal employment opportunity and affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected by law. We provide reasonable accommodations for qualified individuals with disabilities in the application and hiring process.

This employer participates in E-Verify.