Senior Cybersecurity Systems Engineer & ISSM

Nava; Chantilly (VA); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Disability insurance

Vision insurance

401k with match

Paid leave and holidays

Tuition reimbursement

Job summary

AnaVation in Chantilly, VA is seeking a Cybersecurity Systems Engineer / ISSM to lead our information security program, align with business objectives, and protect sensitive systems across corporate, cloud, and classified environments.

You will collaborate with IT, programs, contracts, and leadership; develop SSPs, POA&Ms, and security controls; drive audits, risk management, and training.

Qualifications

• Bachelor’s degree in information security or related field.
• 7+ years of progressive cybersecurity or information assurance experience.
• Experience as ISSM/ISSO/IA Manager.
• Knowledge of NIST SP 800-171/800-53, RMF, DFARS, CMMC.
• Experience developing SSPs, POA&M, policies.
• Experience supporting security audits.
• Excellent written and verbal communication.
• Ability to explain cybersecurity to non-technical audiences.

Responsibilities

• Lead the corporate Information Security Program as ISSM.
• Oversee compliance with NIST, CMMC, DFARS, ISO 27001.
• Design and manage secure operations for all systems.
• Develop and maintain SSPs, POA&Ms, policies.
• Coordinate with stakeholders and senior leadership on risk.
• Deliver security awareness training.
• Support business development with security documentation.

Skills

Cybersecurity principles

Risk management

Security architecture

Systems administration

Cloud services

Executive communication

Leadership

Project management

Education

Bachelor's degree in information security

Tools

Microsoft 365 Government

Microsoft Defender

Entra ID

Intune

Purview

SIEM

EDR

Job description

AnaVation in Chantilly, VA is seeking a Cybersecurity Systems Engineer / ISSM to lead our information security program, align with business objectives, and protect sensitive systems across corporate, cloud, and classified environments.

You will collaborate with IT, programs, contracts, and leadership; develop SSPs, POA&Ms, and security controls; drive audits, risk management, and training.