Information Systems Security Manager (ISSM)

An Information Systems Security Manager (ISSM) provides high-level cybersecurity compliance and risk management, particularly for defense and government systems. These roles focus on NIST Risk Management Framework (RMF) activities, security assessments, and ATO (Authorization to Operate) processes, typically requiring a bachelor's degree, 7+ years of experience, and a security clearance.

Key Responsibilities & Engineering Focus
RMF & Compliance: Developing and maintaining authorization packages (Body of Evidence) for system compliance.
Technical Security Oversight: Evaluating security impact of system changes, performing vulnerability assessments, and overseeing security controls implementation.
System Architecture: Participating in network and system design to ensure "built-in" security.
Stakeholder Management: Serving as the principal advisor to leadership on cybersecurity posture and risk.

Requirements & Qualifications
Experience: Requires 5+ years in cybersecurity or information assurance, often with specialized experience in DoD systems.
Clearance: Active Secret or Top Secret clearance
Skills: In-depth knowledge of NIST SP 800-53, DoDI 8510.01, and technical experience with operating systems and networking.

Education: Bachelor’s degree in a related field (e.g., Computer Science, Cybersecurity) is typically required.