Information Systems Security Manager (ISSM)

8+years of experience
Position Description:
Manages analysts responsible for safeguarding information systems and protecting assets from
unauthorized or accidental access, modification, or destruction.
• Support programs, systems, and enclaves by implementing and enforcing information security
policies, standards, and RMF processes.
• Coordinate with Data Custodians, Project Owners, and ISSMs to categorize systems, assess
security/privacy impacts, manage risk, and document controls in System Security Plans (SSPs) in
accordance with CISO guidance.
• Maintain accurate system data in XACTA (e.g., artifacts, POCs) to support organizational
processes including communication, contingency planning, and reporting.
• Evaluate system and network changes using RMF and recommend configuration deviations from
established baselines.
• Monitor continuous security activities, ensuring timely remediation of vulnerabilities and
anomalies based on risk.
• Develop, maintain, and review SSPs to ensure ongoing compliance and audit readiness.
• Ensure configuration management of security-relevant hardware, software, and firmware is
documented and maintained.
• Oversee system recovery processes to ensure security controls are properly restored.
• Maintain current, accessible security documentation and notify stakeholders of changes
impacting system authorization.
• Participate in governance and project reviews; demonstrate strong technical documentation
skills.
Tools & Frameworks: XACTA 360, Continuum, SCAP-compliant tools; RMF, ICD 503, CNSSI 1253, NIST
SP 800-53/53A, STIGs
Education: Bachelor’s degree in an IT-related field
Desired Certifications: CEH, CISSP, CISA, NCSF, AWS Solutions Architect (Associate or Professional)