Information System Security Manager (ISSM)
Core
Ensuring security considerations in classified and unclassified IT environments and advising on information system security.
Role type
Information System Security Manager (ISSM)
Builds
Compliant information systems within the US National Security Ecosystem
Domain
National Security / Cybersecurity
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
NIST 800-37, NIST 800-171, ACAS (Tenable), HBSS (Trellix ePO), vulnerability analysis, policy drafting, continuous monitoring, CVE research
Preferred skills
Security+ CE, IAM Level I certification, Top Secret clearance
Technologies
SIEM, Vulnerability Scanning, DS/IPS, Linux, Windows, AWS
Responsibilities
Ensure systems are operated, maintained, and disposed of per security policies; Participate in the systems development life cycle for security design; Maintain security architecture (SIEM, Vulnerability Scanning, DS/IPS); Collaborate with administrators to ensure compliance; Draft security policies and procedures; Test controls, record assessments, and maintain POA&M; Perform continuous monitoring per NIST 800-37 and CMMC; Analyze vulnerability scans; Research CVEs and present findings.
Seniority
Mid-level, hands-on IC