Information Systems Security Manager (ISSM)
Core
Lead the Risk Management Framework (RMF) lifecycle for DoD classified systems, ensuring compliance with security controls and facilitating Authorizations to Operate (ATO).
Role type
Senior Information Systems Security Manager (ISSM)
Builds
Secure classified information systems for national security missions
Domain
Defense / National Security / Cybersecurity
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
RMF lifecycle management, security control implementation and validation, risk assessment and adjudication, authorization package development, compliance assessment, stakeholder coordination with Authorizing Officials and SCAs, configuration management, portfolio management
Preferred skills
None stated
Technologies
JSIG, NIST 800-53, DoDI 8510.01, ICD 503
Responsibilities
Develop and maintain authorization packages; Coordinate with SCA and AO representatives to resolve findings and adjudicate risk; Prepare systems for ATO, IATT, and continuous authorization; Ensure implementation and validation of security controls per JSIG/NIST 800-53; Track and remediate POA&Ms; Conduct internal compliance assessments and inspection preparation; Assess technical risk and provide written risk recommendations; Ensure configuration management and baseline control integrity; Provide cybersecurity briefings to senior leadership
Seniority
Senior, hands-on IC