Information Systems Security Manager (TS/SCI #26-170)

Strategic Analysis, Inc.; Arlington (VA); On-site; USD 120,000 - 190,000; Full time

Job summary

Strategic Analysis, Inc. seeks an experienced Information Systems Security Manager (ISSM) to provide information systems security management and technical advisory support within DoD Special Access Programs (SAPs) in Arlington, VA.

The role oversees security programs and RMF/JSIG compliance, coordinating with ISSOs, AOs, and program managers to ensure security requirements are integrated throughout the SDLC.

Qualifications

• 8+ years of information systems security or cybersecurity experience.
• Experience as ISSM/ISSO or similar role in DoD environments.
• Hands-on RMF assessment/authorization and DoD cybersecurity requirements.
• Experience supporting SAPs is desired.

Responsibilities

• Develop, implement, and maintain information systems security policies and programs for classified/SAP environments.
• Oversee RMF/JSIG compliance and authorization activities, reviewing documentation and advising AOs.
• Coordinate with ISSOs, system administrators, and government managers to ensure compliance.
• Conduct risk assessments, evaluate threats, document findings, and implement security controls and mitigations.
• Maintain system authorization documentation, security assessment plans, and compliance records.
• Oversee incident response, media sanitization, and system recovery procedures.

Skills

Security management

RMF/JSIG experience

Education

Bachelor's degree in a related field

Job description

Strategic Analysis, Inc. is seeking an experienced Information Systems Security Manager (ISSM) to provide information systems security management and technical advisory support within Department of Defense (DoD) Special Access Programs (SAPs). The successful candidate will oversee information system security programs, support Risk Management Framework (RMF) assessment and authorization activities, and ensure compliance with applicable DoD cybersecurity policies and requirements.

Responsibilities:

• Develop, implement, and maintain information systems security policies, procedures, and programs supporting classified and SAP environments.
• Oversee system security requirements and compliance with the Risk Management Framework (RMF), Joint Special Access Program Implementation Guide (JSIG), and applicable DoD security directives.
• Manage system assessment and authorization activities, including reviewing documentation and providing recommendations to Authorizing Officials (AOs).
• Conduct risk assessments, evaluate threats and vulnerabilities, and recommend appropriate security controls and corrective actions. Oversee configuration management, security testing, continuous monitoring, and vulnerability management activities.
• Develop and maintain system authorization documentation, security assessment plans, and associated compliance records.
• Establish and enforce procedures for incident response, security violations, media sanitization, and system recovery.
• Coordinate with government program managers, security officials, system administrators, and Information System Security Officers (ISSOs) to ensure compliance with security requirements.
• Ensure security requirements are integrated throughout the system development life cycle, including system modifications and interconnections.
• Oversee cybersecurity training and awareness activities for personnel supporting classified information systems.
• Conduct periodic security assessments, support self-inspections, and ensure corrective actions are implemented.
• Provide technical guidance and oversight to ISSOs and other cybersecurity personnel, performing ISSO duties when necessary.
• Support Assured File Transfer (AFT) requirements and procedures in accordance with applicable security guidance.

Experience & Requirements:

• 8+ years of related information systems security or cybersecurity experience.
• Previous experience serving as an ISSM, ISSO, or in a comparable information systems security role.
• Experience with RMF, system assessment and authorization, and DoD cybersecurity requirements.
• Experience supporting Special Access Programs (SAPs) desired.
• Bachelor's degree in related field
• Active TS/SCI clearance

Certifications:
DoD IAT Level II or IAM Level II certification (e.g., Security+ CE or other qualifying certification).

Travel:
CONUS and OCONUS travel may be required, up to 25%.