ISSM: Lead Cybersecurity Authorization & RMF

LMI; Washington (District of Columbia); On-site; USD 110,000 - 180,000; Full time

Job summary

LMI is seeking an Information System Security Manager (ISSM) to lead security authorization and continuous monitoring for enterprise IT across secure facilities. You will collaborate with system owners, engineers, and government stakeholders to ensure compliant design, documentation, and operation in line with security requirements.

This role emphasizes risk-based judgment, timely delivery in prototype environments, and clear communication of risk and remediation priorities to leadership.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field.
• 8+ years of cybersecurity, information assurance, security authorization, or Risk Management Framework experience, including in classified environments.
• Experience leading security authorization for complex enterprise, interconnected, or multi-enclave systems.
• Strong knowledge of NIST SP 800-37, NIST SP 800-53, CNSSI 1253, and federal, defense, or intelligence security requirements.
• Experience developing or reviewing system security plans, control evidence, assessments, plans of action and milestones, authorization packages, and monitoring deliverables.
• Experience supporting SCIF or other accredited classified environments and advising system owners and program leaders on cybersecurity risk.
• Ability to coordinate technical and nontechnical stakeholders and communicate security status, risk, remediation priorities, and authorization decisions.

Responsibilities

• Lead Risk Management Framework implementation across the system lifecycle, including categorization, control selection and tailoring, implementation, assessment, authorization, and continuous monitoring.
• Develop security authorization strategies and roadmaps for classified and unclassified systems, multi-enclave environments, and interconnected capabilities.
• Coordinate system security plans, implementation evidence, plans of action and milestones, assessment packages, authorization decisions, and monitoring artifacts.
• Interpret and apply NIST SP 800-37, NIST SP 800-53, CNSSI 1253, defense and intelligence guidance, customer policies, and program requirements.
• Advise the Lead Cybersecurity Integrator, system owners, the Chief Engineer, program leadership, and technical teams on cyber risk, control gaps, remediation priorities, and risk acceptance.
• Integrate security requirements into architecture, engineering, acquisition, change management, testing, deployment, operations, and sustainment.
• Oversee vulnerability, configuration, and compliance monitoring; prioritize remediation based on exploitability, mission impact, exposure, and operational consequence.
• Coordinate assessors, authorizing officials, security officers, engineers, operators, and stakeholders through reviews, audits, incidents, and authorization milestones.
• Automate evidence collection, control validation, reporting, plan-of-action tracking, and monitoring while preserving auditability and human oversight.

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field

Job description

LMI is seeking an Information System Security Manager (ISSM) to lead security authorization and continuous monitoring for enterprise IT across secure facilities. You will collaborate with system owners, engineers, and government stakeholders to ensure compliant design, documentation, and operation in line with security requirements.

This role emphasizes risk-based judgment, timely delivery in prototype environments, and clear communication of risk and remediation priorities to leadership.