Information Systems Security Manager (ISSM)

STR; Woburn (MA); On-site; USD 80,000 - 120,000; Full time

Job summary

An established industry player in defense technology is seeking an Information Systems Security Manager (ISSM) to lead cybersecurity initiatives for classified programs. This role involves ensuring compliance with government directives and managing cybersecurity programs. Ideal candidates will possess a Top Secret clearance and relevant certifications, along with experience in risk management frameworks. Join a collaborative team dedicated to national security and technological advancement, where your expertise will contribute to making the world a safer place.

Qualifications

• 2-4 years' experience as an ISSM with compliance knowledge.
• Active Top Secret clearance and U.S. citizenship required.

Responsibilities

• Manage cybersecurity programs aligned with US Government requirements.
• Conduct compliance inspections and coordinate with security teams.

Skills

Cybersecurity Management

Risk Management Framework (RMF)

NIST 800-53 Controls

Vulnerability Assessment Tools

Windows/Linux System Configuration

Communication Skills

Education

DoD 8570 IAM Level III Certification (e.g., CISM, CISSP)

Tools

Nessus

SCAP

Splunk

eMASS

Xacta

SNOW

Job description

Information Systems Security Manager (ISSM)

Join to apply for the Information Systems Security Manager (ISSM) role at STR.

About the Team

The Security team at STR is comprised of highly skilled professionals responsible for maintaining compliance with Government protocols and directives. The Classified Cybersecurity (CCS) team includes ISSMs, ISSOs, and ISSEs passionate about national security, focusing on confidentiality, integrity, and system availability.

The Role

STR seeks an ISSM to oversee classified programs' Cybersecurity and Risk Management Framework (RMF) adherence per government directives and program needs. This onsite position involves collaboration with cybersecurity, security, and system administration teams to ensure compliance and proper configuration management.

Responsibilities

• Manage cybersecurity programs aligned with US Government requirements such as ICD 503, JSIG, NISPOM, and DAAPM.
• Conduct periodic inspections, tests, and reviews to monitor compliance.
• Coordinate with stakeholders and security teams to maintain security posture.
• Perform assessment and authorization activities, including testing, documentation, and control implementation.
• Manage continuous monitoring and POA&M reports.
• Handle security sustainment activities like hardware/software change management, account management, and media protection.
• Assist incident response teams with data spill incidents.
• Understand and document NIST 800-53 controls.
• Perform additional tasks as assigned.

Requirements

• Active Top Secret clearance with ability to obtain SAP and SCI access; U.S. citizenship required.
• DoD 8570 IAM Level III certification (e.g., CISM, CISSP).
• 2-4 years' experience as an ISSM with DAAPM, JSIG, or ICD 503 compliance.
• Experience in SAP/SCI environments.
• Knowledge of vulnerability, compliance, and audit tools (Nessus, SCAP, Splunk, etc.).
• Experience with Windows/Linux system configuration, certification, and auditing.
• Familiarity with authorization databases like eMASS, Xacta, SNOW.
• Strong communication, critical thinking, and problem-solving skills.
• Detail-oriented, self-motivated, and able to prioritize multiple projects.
• Excellent teamwork and customer service skills.

STR is a growing defense technology company with locations across the U.S., specializing in research and development for national security. We foster a collaborative environment that values deep technical expertise and contributions. Join us to push technological boundaries and make the world safer. For more info, visit www.str.us.

STR is an equal opportunity employer committed to diversity and inclusion. We provide accommodations for applicants with disabilities upon request. Positions require security clearances and compliance with export laws.