Senior ISSM: Defense Security & Compliance Leader

Cypress HCM; San Diego (CA); On-site; USD 150,000 - 175,000; Full time

Job summary

Cypress HCM in San Diego seeks an Information Systems Security Manager (ISSM) to lead our security program, aligning with NIST SP 800-171, DFARS, and government regulations. You will oversee CUI protection, risk assessments, and cross-functional security integration across product and vendor ecosystems.

The role requires strong regulatory expertise, CMMC/ISO 27001 readiness, and experience with classified information workflows. Travel up to 10% may be required; U.S. person clearance is a plus.

Qualifications

• BS in Information Security, CS, Cybersecurity or related field.
• 7+ years in information security management, with 3+ years in a leadership role.
• Extensive knowledge of NIST SP 800-171, DFARS 252.204-7012, DISA-STIGS, ISO 27001 and CUI handling.
• Experience crafting and deploying information security frameworks and achieving compliance.
• Risk governance, threat assessments, and vulnerability oversight in classified environments.
• Incident response planning and execution for classified information.

Responsibilities

• Create and maintain information security frameworks aligned to NIST SP 800-171 and DFARS.
• Lead efforts to secure CMMC and ISO 27001 certifications and audits.
• Protect CUI and sensitive data assets across organization.
• Oversee classification handling and compliance with gov't directives.
• Conduct risk assessments and gap analyses for vulnerabilities.
• Collaborate with IT, engineering and vendors to embed security across lifecycle.
• Act as liaison with government agencies and customers on compliance.
• Develop and manage incident response framework and investigations.
• Deliver security training to staff on policies and best practices.
• Monitor regulatory changes and adjust security posture accordingly.
• Coordinate with DevSecOps on cATO workflows and secure architectures.

Skills

Security leadership

Regulatory compliance

Cross-functional collaboration

Communication skills

Education

Bachelor's degree in Information Security, Computer Science, Cybersecurity or related field

Job description

Cypress HCM in San Diego seeks an Information Systems Security Manager (ISSM) to lead our security program, aligning with NIST SP 800-171, DFARS, and government regulations. You will oversee CUI protection, risk assessments, and cross-functional security integration across product and vendor ecosystems.

The role requires strong regulatory expertise, CMMC/ISO 27001 readiness, and experience with classified information workflows. Travel up to 10% may be required; U.S. person clearance is a plus.