On-Site DoD ISSM | RMF & ATO Compliance Lead

Via Logic LLC; Lorton (VA); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos seeks an Information System Security Manager (ISSM) to oversee cybersecurity posture for DoD information systems on a fast-paced Air Force Life Cycle Management Center program.

This on-site role requires collaboration with ISSOs, Cyber Security Engineers, and cross-functional teams to implement RMF, risk assessments, audits, and continuous monitoring, ensuring confidentiality, integrity, and availability of sensitive data.

Qualifications

• Bachelor’s degree with 8+ years or Master’s with 6+ years experience.
• Active Top Secret clearance with ability to obtain SCI.
• CISSP or CISM certification or equivalent.
• Deep knowledge of DoD policies and frameworks (NIST 800-53, RMF, FISMA, ICD 503, JSIG).
• Cloud security experience and building/maintaining ATO for cloud-based systems.
• Experience with risk management and vulnerability assessments.
• Ability to work independently and with cross-functional teams.

Responsibilities

• Act as SME on cybersecurity compliance/information assurance.
• Collaborate with ISSOs and Cyber Security Engineers to execute continuous monitoring.
• Manage operational cybersecurity posture with NOC/SOC and Cloud teams.
• Facilitate ATO/ATE/ATC/ISA processes with stakeholders and customers.
• Develop, implement, and maintain security policies and documentation (DoD standards).
• Oversee security posture of DoD information systems (confidentiality, integrity, availability).
• Perform risk, vulnerability assessments, and audits to identify vulnerabilities and remediation.

Skills

Strong communication

Independent work

Cross-functional collaboration

Threat modeling

Education

Bachelor’s Degree

Master’s Degree

CISSP

CISM

Tools

SIEM

Firewalls

IDS/IPS

Endpoint protection

Job description

Leidos seeks an Information System Security Manager (ISSM) to oversee cybersecurity posture for DoD information systems on a fast-paced Air Force Life Cycle Management Center program.

This on-site role requires collaboration with ISSOs, Cyber Security Engineers, and cross-functional teams to implement RMF, risk assessments, audits, and continuous monitoring, ensuring confidentiality, integrity, and availability of sensitive data.