Information Systems Security Manager (ISSM)

Istari Digital; Washington (District of Columbia); Hybrid; USD 150,000 - 220,000; Full time

Benefits offered by this job

Hybrid work model

Bonuses

Equity

Benefits package

Job summary

Istari Digital seeks an experienced Information System Security Manager (ISSM) to lead cybersecurity for assigned information systems. This hybrid role requires 3 days per week in the Arlington, VA office and close collaboration with engineering and customer success teams.

The successful candidate will develop, implement, and evaluate security programs to comply with JSIG, NIST SP 800-171/800-53, CMMC, and ITAR, while maintaining SSPs, risk assessments, and incident response.

Qualifications

• Minimum 10 years of experience in cybersecurity or related field.
• Deep understanding of JSIG, NIST 800-171, NIST 800-53, ITAR, and CMMC.
• Experience with risk assessments, vulnerability identification, and security control implementation.
• Experience with security incident investigation and response.
• Excellent communication and collaboration with technical and non-technical audiences.
• Strong analytical and problem-solving skills.

Responsibilities

• Advise on cybersecurity for assigned information systems.
• Develop and evaluate security program policy aligned with regulatory requirements.
• Conduct risk assessments and identify vulnerabilities.
• Implement and monitor security controls to mitigate risks.
• Deliver cybersecurity awareness training to staff.
• Investigate security incidents and maintain SSPs and risk reports.
• Collaborate with engineering and customer success teams for secure implementations.

Skills

Cybersecurity leadership

Communication skills

Risk assessment & mitigation

Stakeholder collaboration

Analytical thinking

Education

Bachelor's degree in computer science, information systems, or related field

CISSP

CISM

Active TS Security Clearance

Tools

JSIG

NIST 800-53

NIST 800-171

CMMC

ITAR

Job description

Job Description

We are seeking a highly experienced and knowledgeable Information System Security Manager (ISSM) to join our Cybersecurity team.

This role will be hybrid 3 days per week in our Arlington, VA office.

The ISSM will serve as a principal advisor on all matters, technical and otherwise, involving the cybersecurity of information systems under their purview. This role requires a deep understanding of cybersecurity principles, practices, and frameworks, and the ability to develop, implement, and evaluate information system security program policy consistent with Federal and Commercial regulatory requirements. The ISSM will work closely with various stakeholders across the organization to ensure the confidentiality, integrity, and availability of our information systems.

Core Responsibilities

• Serve as the principal advisor on all matters involving the cybersecurity of assigned information systems.
• Develop, implement, and evaluate information system security program policy consistent with Federal and Commercial regulatory requirements, including JSIG, NIST 800-171, NIST 800-53, CMMC, and ITAR.
• Conduct risk assessments and identify vulnerabilities in information systems.
• Develop and implement security controls to mitigate identified risks.
• Monitor and evaluate the effectiveness of security controls.
• Develop and deliver cybersecurity awareness training to employees.
• Investigate security incidents and breaches.
• Maintain security documentation, including system security plans (SSPs), risk assessments, and incident reports.
• Stay up-to-date with the latest cybersecurity threats and vulnerabilities.
• Collaborate with the engineering and customer success teams to ensure secure implementation and configuration of systems.

Required Qualifications

• Minimum of 10 years of experience in a relevant field.
• Deep understanding of cybersecurity principles, practices, and frameworks, including JSIG, NIST 800-171, NIST 800-53, ITAR, and CMMC.
• Experience with risk assessments, vulnerability identification, and security control implementation.
• Experience with security incident investigation and response.
• Excellent communication and collaboration skills, with the ability to effectively communicate with both technical and non-technical audiences.
• Strong analytical and problem-solving skills.

Preferred Qualifications

• Bachelor's degree in computer science, information systems, or a related field.
• Relevant certifications (e.g., CISSP, CISM).
• Experience with SOC compliance and audits.
• Active TS Security Clearance.

About Istari Digital

Istari is a digital engineering software company building open, scalable infrastructure for engineering data. Our platform lets customers simply and securely integrate engineering models across disciplines, organizations, and security levels — whether they're designing prototypes, performing virtual testing, or training AI and autonomy for complex systems.

Focus is rewarded. Finish is remembered. Facts are friendly. Even when they are not fun. Fellowship is fundamental. Make others successful.

The anticipated compensation range for this position may vary based on experience, skills, qualifications, location, and business needs. In addition to base salary, this role may be eligible for bonuses, equity, and a comprehensive benefits package.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.