Sr. Information System Security Manager (ISSM) with Security Clearance

RMantra Solutions Inc.; Fort Meade (MD); On-site; USD 120,000 - 170,000; Full time

Job summary

RMantra Solutions Inc. is seeking a Senior Information System Security Manager (ISSM) to lead RMF lifecycle for DoD systems at Fort Meade. You will manage ATO processes, coordinate certification activities, and oversee vulnerability management and security documentation in eMASS and PPSM.

The role requires DoD policy expertise, CISSP/CISM or equivalent, and strong communication to present security posture to stakeholders. A US Secret clearance is required.

Qualifications

• Bachelor’s Degree with 8+ years of experience or Master’s with 6+ years.
• CISSP, CISM or similar cybersecurity certification.
• Knowledge of DoD cybersecurity policies and RMF/NIST standards.
• Experience with network systems and ATO processes.
• Experience with vulnerability assessments and security tooling.

Responsibilities

• Manage RMF lifecycle for systems enabling ATO accreditation.
• Provide ISSM, FISMA, and C&A support for systems.
• Conduct assessments of security controls in eMASS and PPSM.
• Manage whitelist records and POA&Ms; address vulnerabilities.
• Maintain eMASS control records and remediation timelines.
• Coordinate cybersecurity activities for authorization to test and operate.
• Create and deliver security plans, test plans, reports, and packages.
• Lead governance and reporting, including system architectures and IA objectives.
• Prepare documentation and briefings for DISA OAB reviews.

Skills

US Secret clearance

Strong communication

Independent work

Education

Bachelor’s Degree + 8+ years

Master’s Degree + 6+ years

CISSP / CISM certification

Job description

RMantra Solutions is conducting immediate interviews for a Sr. ISSM.

Primary Responsibilities

• Manage the Risk Management Framework (RMF) lifecycle for supported systems enabling the achievement and continued maintenance of Authority to Operate (ATO) accreditation.
• Provide ISSM, FISMA, and certification and accreditation support for systems and associated components.
• Conduct recurring assessments of security controls and documentation in eMASS and PPSM to verify continued accuracy, compliance, and readiness.
• Manage whitelist records, address vulnerabilities identified through recurring IAVMS scans, and develop Plans of Action and Milestones (POA&Ms) when required.
• Maintain eMASS control records and POA&Ms in accordance with ATO conditions, approval requirements, and remediation timelines.
• Coordinate cybersecurity activities supporting interim and final authorization to test and operate, including assessments, mitigation planning, patch validation, implementation tracking, and status reporting.
• Create and deliver cybersecurity test plans, test reports, implementation plans, security technical configuration documentation, vulnerability assessment reports, and authorization package materials.
• Lead cybersecurity governance and reporting activities, including the development and maintenance of system architectures, requirements, security plans, protection plans, IAVA actions, and IA-related objectives.
• Prepare program documentation, evidence, and briefings for DISA OAB reviews and support the team throughout the review process.

Basic Qualifications:

Preferred Qualifications

• Bachelor’s Degree with 8+ years of experience or Master’s degree with 6+ years of experience. Additional experience may be considered in lieu of a degree.
• CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or similar cybersecurity certification.
• In-depth knowledge of DoD cybersecurity policies, frameworks, and compliance standards (e.g., NIST 800-53, RMF, FISMA, ICD 503, JSIG).
• In-depth experience with network systems and building/maintaining an ATO for enterprise computing information systems.
• Experience with system security engineering, risk management, and vulnerability assessments.
• Strong understanding of network security, security controls, and common cybersecurity tools (e.g., firewalls, IDS/IPS, SIEM, endpoint protection).
• Ability to work independently and collaborate effectively with cross-functional teams.
• Strong communication skills, including the ability to create and present detailed security reports to stakeholders.
• Clearance: US Secret clearance required
• Experience in managing security for complex DoD programs or mission-critical systems.
• Experience with security tools for vulnerability scanning, penetration testing, and security auditing.
• Advanced security certifications (e.g., CISA, CEH, CSSP, etc.).
• Experience with configuration management and change management processes in a secure environment.
• Experience with automation and the continuous ATO (cATO) process.

Required Education And Experience

• Bachelor’s Degree with 8+ years of experience or Master’s degree with 6+ years of experience. Additional experience may be considered in lieu of a degree.
• CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or similar cybersecurity certification.
• In-depth knowledge of DoD cybersecurity policies, frameworks, and compliance standards (e.g., NIST 800-53, RMF, FISMA, ICD 503, JSIG).
• In-depth experience with network systems and building/maintaining an ATO for enterprise computing information systems.
• Experience with system security engineering, risk management, and vulnerability assessments.
• Strong understanding of network security, security controls, and common cybersecurity tools (e.g., firewalls, IDS/IPS, SIEM, endpoint protection).
• Ability to work independently and collaborate effectively with cross-functional teams.
• Strong communication skills, including the ability to create and present detailed security reports to stakeholders.
• Clearance: US Secret clearance required
• Experience in managing security for complex DoD programs or mission-critical systems.
• Experience with security tools for vulnerability scanning, penetration testing, and security auditing.
• Advanced security certifications (e.g., CISA, CEH, CSSP, etc.).
• Experience with configuration management and change management processes in a secure environment.
• Experience with automation and the continuous ATO (cATO) process.

Interview?