Information Systems Security Manager (ISSM)

Overview

For two decades, Millennium Corporation has been operating on the leading edge of cybersecurity. Our elite team of more than 400 experts has an unparalleled record of performance supporting Red Team Operations, Defensive Cyber Operations, Software Engineering, and Technical Engineering. With the largest contingent of contracted Red Team operators in the DoD, we provide an unmatched level of threat intelligence and battle-tested experience for customers in both the DoD and federal civilian markets.

What We Believe

We believe that diversity is a fact, inclusion is a choice. At Millennium Corporation, we are inclusive. We celebrate multiple approaches and different points of view. We strongly believe that diversity drives innovation, and we are building a culture where differences are valued. We are always growing our programs and we offer tools to help our employees grow and manage their careers.

Millennium is an equal opportunity employer and does not discriminate or allow discrimination on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state, or local law. Millennium promotes affirmative action for women, minorities, disabled persons, LGBTQ+ and veterans.

Responsibilities

Millennium Corporation is hiring an Information Systems Security Manager (ISSM) in Annapolis, MD. Candidate must have an active Top Secret/SCI clearance with eligibility to obtain CI Polygraph.

The ISSM will support the development, implementation, and oversight of information system (IS) security programs and policies in accordance with government standards. The ISSM will also:

• Develop and maintain IS security policies, procedures, and implementation guidelines.
• Provide technical and procedural security guidance to government and contractor teams.
• Coordinate security approvals for external and interconnected systems.
• Ensure System Administrators and ISSOs are trained and actively monitor for vulnerabilities and threats.
• Manage IS security documentation, authorizations, and incident response.
• Enforce data ownership, access controls, and accountability measures.
• Oversee security education, training, and awareness programs.
• Ensure compliance with configuration management (CM) procedures for hardware/software changes.
• Support continuous monitoring and maintain knowledge of system functions and security controls.
• Report vulnerabilities and assess system/environment changes for security impact.
• Contribute to the concept of operations for new systems.
• Ensure physical security of SAP facilities per DoD/ICD-705 standards; conduct facility inspections.
• Coordinate with PSO and SSO on facility updates and compliance.

Qualifications

• Candidate must have an active Top Secret/SCI clearance with eligibility to obtain CI Polygraph.
• Bachelor's degree and 5 years of experience OR Master's degree and 8 years of relevant experience with A&A (Authorization and Assessment) and Risk Management Framework (RMF) processes utilizing eMASS and/or XACTA.
• CISSP, CASP, CISM, Sec+ preferred.
• Experience with Service Now, Windows OS and RHEL (Linux), utilizing the ZT and NIST framework standards supporting ATO packages and lifecycle documentation.
• Knowledge of provisioning, patching and deployment of anti-malware controls and countermeasures.
• Experience utilizing STIGs and ICDs for vulnerability assessments supporting continuous monitoring.
• Experience with Tenable, Splunk and CSP CONMON and defense services.
• Experience with incident response planning and IA risk assessments.
• Experience with Security control assessment (SCA) coordination and Plan of Action and Milestones (POA&M).

Business Development

Assist with Business Development activities as required to support Millennium's strategic business objectives, which may include but not limited to participation in technical interviews, creation of technical documentation, general proposal writing support and proposal color reviews.

Physical Requirements

• Must be comfortable with prolonged periods of sitting at a desk and working on a computer.
• Must be able to lift up to 10-15 pounds at a time.

Travel Requirements

Once a quarter