Senior Information Security Manager - RMF/SAP Lead

General Dynamics Information Technology, Inc.; Bedford (MA); On-site; USD 120,000 - 162,000; Full time

Job summary

General Dynamics Information Technology, Inc. in Bedford, MA is seeking an Information Systems Security Manager (ISSM) II. The role provides expert security leadership for collateral, SCI, and SAP activities, supporting RMF-based authorization and JSIG processes.

You will oversee information security policy implementation, risk assessments, and training, while coordinating with DoD customers and internal teams to maintain compliant security postures across authorization boundaries.

Qualifications

• 7+ years of related experience.
• SAP experience required.
• Security Clearance: Active TS/SCI with ability to obtain CI Poly.

Responsibilities

• Oversee the development, implementation and evaluation of information system security program policy.
• Advise government program managers on RMF assessment and authorization issues.
• Perform risk assessments and make recommendations to DoD agency customers.
• Develop and maintain a formal Information Systems Security Program (ISSP).
• Coordinate with PSO or cognizant security official on approval of external information systems.
• Develop policies for responding to security incidents and for incident reporting.

Skills

Information Security

Information Security Management

Information System Security

Education

Bachelor’s degree in related discipline

Associate’s degree in related area + 2 years’ experience

Equivalent experience (4 years)

Job description

General Dynamics Information Technology, Inc. in Bedford, MA is seeking an Information Systems Security Manager (ISSM) II. The role provides expert security leadership for collateral, SCI, and SAP activities, supporting RMF-based authorization and JSIG processes.

You will oversee information security policy implementation, risk assessments, and training, while coordinating with DoD customers and internal teams to maintain compliant security postures across authorization boundaries.