Program Information System Security Manager

Leidos; Huntsville (AL); On-site; USD 108,000 - 195,000; Full time

Benefits offered by this job

Health and Wellness programs

Income Protection

Paid Leave

Retirement

Job summary

Leidos Dynetics is seeking a Program Information System Security Manager (P-ISSM) to lead a team of ISSOs and deliver security authorization for classified programs in Huntsville, AL. The role reports to the Collateral IS M and focuses on authorization, continuous monitoring, and readiness across DCSA-authorized networks.

You will guide policy implementation, manage risk, and coordinate with the Collateral ISSM to ensure compliance with RMF, NISPOM, and DAAG.

Qualifications

• Active DoD Secret clearance; ability to obtain Top Secret.
• DoD 8140-aligned certification (CISSP, CISM, CAP, GSLC, or equivalent).
• Familiarity with RMF, NISPOM, DAAG, and NIST SP 800-53.
• Experience leading teams of 3+ ISSOs.
• Proficiency with eMASS and vulnerability/monitoring tools.

Responsibilities

• Provide personnel management for a team of ISSOs, including performance plans and coaching.
• Oversee ISSO assessments, authorization artifacts, and configuration reviews.
• Serve as Program ISSSM for assigned systems; develop and maintain security policies per RMF/DAAG/NISPOM.
• Lead ATO efforts and maintain SSPs, POA&Ms, and BoE in eMASS.
• Review and certify authorization packages for AO approval; manage risk decisions.
• Act as the primary IA contact for PMs and program personnel; advise on risk decisions.
• Develop risk-based solutions spanning multiple systems and disciplines.
• Lead CM efforts; chair CCB; approve changes affecting security posture.
• Oversee continuous monitoring, vulnerability management, and STIG/SCAP compliance.
• Prepare for CORA, SVA, OSVs, and other government cybersecurity inspections.
• Investigate incidents and ensure corrective actions are completed.
• Oversee media sanitization and hardware release per policy.

Skills

People management

Team leadership

Communication

Coaching

Project management

Analytical thinking

Problem solving

Education

Bachelor's degree in a relevant field

Master's degree

Tools

eMASS

Splunk

Trellix

Ten able/ACAS

SCAP Viewer

Active Directory

Job description

At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers’ success. We empower our teams, contribute to our communities, and operate sustainably. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business. Our Leidos Dynetics team, operating within the Corporate Information Security Office and reporting through our Digital sector, is seeking a Program Information System Security Manager (P-ISSM) to join the Information Assurance (IA) team in Huntsville, AL. In this role, you will report to the Collateral Information System Security Manager (ISSM) and play a valuable role in leading a team of Information System Security Officers (ISSOs) to deliver classified authorization and cybersecurity compliance support to programs operating on DCSA-authorized networks. You will own the authorization, continuous monitoring, and inspection readiness of your assigned systems, and as a manager, you will have the opportunity to coach and mentor future IA leaders. Location: All work will be performed on-site at our Huntsville location, up to 25% local telework is allowable. Clearance: You must currently hold an active Secret clearance and be eligible to obtain Top Secret following hire. This position will support the enterprise, more specifically our Leidos Defense Systems Sector. This sector provides a diverse portfolio of systems, solutions, and services covering land, sea, air, space, and cyberspace for customers worldwide. Solutions for Defense include enterprise and mission IT, large-scale intelligence systems, command and control, geospatial and data analytics, cybersecurity, logistics, training, and intelligence analysis and operations support. Our team is solving the world’s toughest security challenges for customers with "can’t fail" missions.

Primary Responsibilities

• Provide personnel management for a team of Information System Security Officers (ISSOs) supporting authorized classified information systems, including employee check-ins, performance plans and reviews, training, professional development, and coaching.
• Provide technical oversight and quality review of ISSO assessments, authorization artifacts, and configuration management reviews, and delegate authority to ISSOs as appropriate.
• Serve as the Program ISSM for assigned classified information systems, working with the Collateral ISSM to develop, implement, and maintain security policies, procedures, and documentation in compliance with NISPOM (32 CFR Part 117), the DCSA Assessment and Authorization Guide (DAAG), NIST Risk Management Framework (RMF), and DoW security standards.
• Lead Authorization to Operate (ATO) efforts and ongoing authorization activities, including System Security Plans (SSPs), security control assessments, Plans of Action and Milestones (POA&Ms), and Body of Evidence (BoE) artifacts maintained in eMASS.
• Review and certify authorization packages for submission to the Authorizing Official (AO) and manage risk acceptance and POA&M decisions in coordination with the Collateral ISSM.
• Act as the primary Information Assurance point of contact for Program Managers, Facility Security Officers, and program personnel, providing cybersecurity guidance and influencing system design, process, and risk decisions.
• Develop risk-based solutions to complex technical and compliance issues spanning multiple systems, programs, and technical disciplines.
• Lead Configuration Management efforts, chair or participate in the Change Control Board (CCB), approve security-relevant changes, and elevate significant changes to the Collateral ISSM and the Authorizing Official (AO) representative as required.
• Oversee continuous monitoring, including vulnerability scanning and remediation tracking, STIG and SCAP compliance, audit log review, and security event analysis, and verify mitigation of findings.
• Direct preparation for DCSA Cyber Operational Readiness Assessments (CORA), Security Vulnerability Assessments (SVA), On-Site Verifications (OSVs), and other government cybersecurity inspections, and coordinate corrective actions.
• Investigate information system security incidents and violations, and ensure required reporting and corrective and preventative actions are completed.
• Oversee media sanitization, declassification, and hardware release in accordance with security policy and AO guidance.
• Perform risk and vulnerability assessments and security audits to identify system weaknesses and provide risk-based remediation strategies to program and IA leadership.
• Evaluate and implement new cybersecurity processes, technologies, and tools to improve system security, compliance, and operational effectiveness.
• Prepare and present status reporting to the Collateral ISSM, including the weekly action report and monthly operations report covering system status, issues, concerns, and impacts.
• Develop and deliver information system security training and awareness for users, privileged users, and ISSOs.
• Perform ISSO duties as needed.

Basic Qualifications

• Bachelor's degree with 8+ years of relevant cybersecurity, information technology, information assurance, or information systems security experience, or Master's degree with 6+ years of relevant experience.
• Additional relevant experience may be considered in lieu of a degree consistent with Leidos job-level requirements.
• Active DoD Secret clearance, with the ability to obtain and maintain a Top Secret clearance.
• Must currently hold an industry certification required by DoD 8140 policy and aligned to the DoD Cyber Workforce Framework (DCWF) Information Systems Security Manager work role (for example, CISSP, CISM, CAP, CGRC, GSLC, or equivalent), or otherwise satisfy DoD 8140 qualification requirements through approved education, training, or experience.
• Working knowledge of the Risk Management Framework (RMF), System Security Plans, and activities for receiving and maintaining information system authorization for Defense Counterintelligence and Security Agency (DCSA) and customer-authorized classified systems.
• Working knowledge of the National Industrial Security Program Operating Manual (NISPOM) and the DCSA Assessment and Authorization Guide (DAAG).
• Proficiency with the Enterprise Mission Assurance Support Service (eMASS).
• Experience with vulnerability management, compliance, and security monitoring tools.
• Demonstrated ability to develop and maintain detailed cybersecurity documentation and objective evidence supporting system compliance.
• Ability to independently manage multiple cybersecurity activities and priorities.
• Ability to communicate challenges, risks, and solutions effectively, both written and orally, to program and IA leadership, and to influence project and team leaders on solution design and approach.
• Proficient in Microsoft Office and Microsoft collaboration tools.

Relevant Experience Considered

• Cybersecurity, information assurance, information systems security, system administration, or Information Technology.
• RMF compliance, DCSA DAAG, NISPOM, and NIST SP 800-53 security control implementation and assessment, or maintenance of authorization packages.
• Continuous monitoring, vulnerability management, security configuration assessment, and audit log analysis.
• Preparation for and support of DCSA assessments, inspections, or other government cybersecurity readiness reviews.
• Leading, mentoring, or supervising cybersecurity or technical staff.
• Project or program management involving technical, cybersecurity, compliance, or information system activities.

Preferred Qualifications

• High level of proficiency with the DCSA instance of eMASS or equivalent.
• Experience preparing for and supporting DCSA On-Site Validations (OSVs), CORA, SVA, or other government cybersecurity inspections.
• Familiarity with DoD classified information systems, including SIPRNet, SDREN or other classified computing environments.
• Experience with tools such as Splunk, Trellix, Tenable/ACAS, SCAP Compliance Checker, and STIG Viewer.
• Working knowledge of Windows and Linux operating systems, Active Directory, virtualization, and enterprise identity management solutions.
• Familiarity with cyber incident response activities, including detection, containment, eradication, recovery, and reporting.
• Prior experience managing teams of 3 or more individuals.

At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail.

Original Posting: October 27, 2026

Pay Range

Pay Range: Pay Range $107,900.00 - $195,050.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Leidos Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $17.2 billion for the fiscal year ended January 2, 2026. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers.

• competitive compensation
• Health and Wellness programs
• Income Protection
• Paid Leave
• Retirement

More details are available here.

Securing Your Data

Leidos will never ask you to provide payment-related information at any part of the employment application process. And Leidos will communicate with you only through emails that are sent from a Leidos.com email address. If you receive an email purporting to be from Leidos that asks for payment-related information or any other personal information, please report the email to [e-mail].

Commitment and Diversity

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.