Sr. Information System Security Manager (ISSM) with Security Clearance

RMantra Solutions; Fort Meade (MD); On-site; USD 120,000 - 160,000; Full time

Job summary

RMantra Solutions is actively interviewing for a Senior Information Systems Security Manager (ISSM) to manage RMF lifecycles and support ATO for DoD systems. The role requires DoD policy expertise, CISSP/CISM, and a Secret clearance.

Responsibilities include leading assessment and authorization activities, coordinating safety and security plans, and delivering comprehensive documentation for audits and reviews in a fast-paced defense environment.

Qualifications

• Bachelor’s Degree with 8+ years of experience or Master’s degree with 6+ years of experience.
• CISSP, CISM, or similar cybersecurity certification.
• In-depth knowledge of DoD cybersecurity policies, frameworks, and compliance standards (e.g., NIST 800-53, RMF, FISMA, ICD 503, JSIG).

Responsibilities

• Manage RMF lifecycle to achieve and maintain ATO accreditation.
• Provide ISSM, FISMA, and C&A support for systems and components.
• Conduct assessments of security controls and documentation in eMASS and PPSM.
• Manage whitelist records, address vulnerabilities, and develop POA&Ms.
• Maintain eMASS control records and POA&Ms per ATO conditions and remediation timelines.
• Coordinate cybersecurity activities for interim and final authorization to test and operate.
• Create and deliver cybersecurity test plans, reports, and authorization package materials.
• Lead cybersecurity governance and reporting and develop system architectures and security plans.
• Prepare documentation and briefings for DISA OAB reviews.

Skills

CISSP

CISM

DoD policies

RMF knowledge

Vulnerability assessment

Communication skills

Clearance

Independent work

Education

Bachelor’s Degree 8+ years

Master’s Degree 6+ years

Tools

eMASS

PPSM

IAVA

SIEM

Job description

RMantra Solutions is conducting immediate interviews for a Sr. ISSM.

Primary Responsibilities

• Manage the Risk Management Framework (RMF) lifecycle for supported systems enabling the achievement and continued maintenance of Authority to Operate (ATO) accreditation.
• Provide ISSM, FISMA, and certification and accreditation support for systems and associated components.
• Conduct recurring assessments of security controls and documentation in eMASS and PPSM to verify continued accuracy, compliance, and readiness.
• Manage whitelist records, address vulnerabilities identified through recurring IAVMS scans, and develop Plans of Action and Milestones (POA&Ms) when required.
• Maintain eMASS control records and POA&Ms in accordance with ATO conditions, approval requirements, and remediation timelines.
• Coordinate cybersecurity activities supporting interim and final authorization to test and operate, including assessments, mitigation planning, patch validation, implementation tracking, and status reporting.
• Create and deliver cybersecurity test plans, test reports, implementation plans, security technical configuration documentation, vulnerability assessment reports, and authorization package materials.
• Lead cybersecurity governance and reporting activities, including the development and maintenance of system architectures, requirements, security plans, protection plans, IAVA actions, and IA-related objectives.
• Prepare program documentation, evidence, and briefings for DISA OAB reviews and support the team throughout the review process.

Basic Qualifications

• Bachelor’s Degree with 8+ years of experience or Master’s degree with 6+ years of experience. Additional experience may be considered in lieu of a degree.
• CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or similar cybersecurity certification.
• In-depth knowledge of DoD cybersecurity policies, frameworks, and compliance standards (e.g., NIST 800-53, RMF, FISMA, ICD 503, JSIG).
• In-depth experience with network systems and building/maintaining an ATO for enterprise computing information systems.
• Experience with system security engineering, risk management, and vulnerability assessments.
• Strong understanding of network security, security controls, and common cybersecurity tools (e.g., firewalls, IDS/IPS, SIEM, endpoint protection).
• Ability to work independently and collaborate effectively with cross-functional teams.
• Strong communication skills, including the ability to create and present detailed security reports to stakeholders.
• Clearance: US Secret clearance required.
• Experience in managing security for complex DoD programs or mission-critical systems.
• Experience with security tools for vulnerability scanning, penetration testing, and security auditing.Advanced security certifications (e.g., CISA, CEH, CSSP, etc.).
• Experience with configuration management and change management processes in a secure environment.
• Experience with automation and the continuous ATO (cATO) process.

Preferred Qualifications

• Bachelor’s Degree with 8+ years of experience or Master’s degree with 6+ years of experience. Additional experience may be considered in lieu of a degree.
• Experience with security tools for vulnerability scanning, penetration testing, and security auditing.
• Advanced security certifications (e.g., CISA, CEH, CSSP, etc.).

Required Education And Experience

• Bachelor’s Degree with 8+ years of experience or Master’s degree with 6+ years of experience. Additional experience may be considered in lieu of a degree.

Interview?