Information Systems Security Manager (ISSM)

Overview

Thank you for considering IT Concepts dba Kentro, where innovation drives opportunity and collaboration leads to success. Our dynamic community of experts is fully committed to advancing our customers' missions, fostering professional growth, and making a positive impact on our communities.

By joining our supportive community, you will find that Kentro is dedicated to your personal and professional development. Together, we can drive meaningful change, spark innovation, and achieve extraordinary milestones.

Kentro is hiring an Information Systems Security Manager (ISSM) to support USSOCOM/ EDAT Zero Trust. This position will primarily operate within a Top-Secret environment and will work closely with USSOCOM engineering teams, cybersecurity personnel, system owners, architects, program leadership, and the Defense Intelligence Agency (DIA).

The ideal candidate is not simply experienced in maintaining RMF documentation.

We are looking for an ISSM who has personally supported multiple information systems through the full Risk Management Framework (RMF) and Authorization to Operate (ATO) lifecycle, preferably resulting in successful DIA authorization.

This individual must be technically credible, organized, proactive, and capable of working collaboratively with engineers to translate technical implementations into defensible security controls and authorization evidence.

Location: Onsite in Tampa, FL

This Job Description reflects the primary duties of the role; however, it is not intended to be all-inclusive. Team members may be asked to take on additional responsibilities in alignment with customer expectations, business needs, and Kentro's culture of collaboration and adaptability.

Responsibilities

• Lead and coordinate RMF and ATO activities for systems operating within USSOCOM classified environments.
• Manage systems through the complete authorization lifecycle, from initial system categorization and control implementation through assessment, authorization, continuous monitoring, and reauthorization.
• Develop, maintain, and manage authorization packages within Xacta.
• Serve as a primary cybersecurity liaison between engineering teams, system owners, program leadership, ISSOs, security assessors, and DIA authorization stakeholders.
• Work directly with engineers to understand system architecture, configurations, data flows, interfaces, security boundaries, and implemented cybersecurity controls.
• Translate technical engineering activities into appropriate RMF control implementation statements and supporting evidence.
• Develop and maintain required authorization artifacts, including SSPs, control implementation documentation, POA&Ms, risk assessments, network/system diagrams, inventories, security procedures, and supporting evidence.
• Review ATO packages for completeness, technical accuracy, consistency, and readiness prior to submission.
• Coordinate remediation of security findings and vulnerabilities with engineering teams.
• Track cybersecurity risks, deficiencies, POA&M items, dependencies, and authorization milestones through closure.
• Support security control assessments, validation activities, and responses to assessor or Authorizing Official questions.
• Maintain authorization posture following ATO through continuous monitoring, change management, vulnerability management, and reauthorization activities.
• Identify authorization risks early and communicate potential schedule or compliance impacts to program leadership.
• Participate in technical and programmatic discussions to ensure cybersecurity requirements are incorporated into engineering decisions rather than addressed only at the end of the development lifecycle.
• Build productive working relationships across the program and maintain professional, collaborative engagement with USSOCOM and DIA stakeholders.

Qualifications

• Education: Bachelor's degree in Cybersecurity, Information Assurance, Information Systems, Computer Science, Information Technology, Engineering, or a related technical field. Equivalent education and experience may be considered in accordance with contract and position requirements.
• Experience:
  • Significant experience supporting cybersecurity/RMF activities within classified DoD or Intelligence Community environments.
  • Hands-on experience using Xacta to develop, manage, track, or submit RMF/ATO packages.
  • Demonstrated experience supporting information systems through the full RMF/ATO lifecycle.
• Technical Skills:
  • DoD Risk Management Framework (RMF)
  • NIST SP 800-53 security controls
  • Security control implementation and assessment
  • System Security Plans (SSPs)
  • Plans of Action and Milestones (POA&Ms)
  • Vulnerability and risk management
  • Continuous monitoring
  • Authorization and reauthorization processes
  • Ability to understand technical system architectures and communicate effectively with cybersecurity engineers, system engineers, architects, and other technical SMEs.
  • Strong written and verbal communication skills with the ability to communicate cybersecurity risk to both technical and non-technical stakeholders.
  • Demonstrated ability to operate effectively on a multidisciplinary team and coordinate activities across engineering, cybersecurity, program management, and government organizations.
• Certification Required: Must meet applicable DoD IAT Level III certification requirements

Preferred Qualifications:

• Direct experience obtaining ATOs through the Defense Intelligence Agency (DIA).
• Experience taking multiple systems from initial RMF activities through successful DIA authorization.
• Previous experience supporting USSOCOM or another Combatant Command (CCMD).
• Experience working within TS/SCI environments and classified networks.
• Previous experience operating within or supporting the SOCRATES environment.
• Experience working directly with DIA cybersecurity, assessment, or authorization personnel.
• Experience supporting complex enterprise cybersecurity programs involving multiple systems, enclaves, security boundaries, and engineering teams.
• Strong familiarity with DoD and Intelligence Community cybersecurity governance and authorization processes.

Clearance Requirement:

• Active TS/SCI
• US Citizen or Lawful Permanent Resident (Green Card)

Benefits

The Company

We believe in generating success collaboratively, enabling long-term mission success, and building trust for the next challenge. With you as our partner, let's solve challenges, think innovatively, and maximize impact. As a valued member of our team, you have the unique opportunity to work in a diverse range of technology and business career paths, all while supporting our nation and delivering innovative technology solutions. We are a close community of experts that pride ourselves on creating an environment defined by teamwork, dedication, and excellence.

We hold three ISO certifications (27001:2013, 20000-1:2011, 9001:2015), two CMMI ML 3 ratings (DEV and SVC) and CMMC Level 2 Certification.

Industry Recognition

Growth | Inc 5000's Fastest Growing Private Companies, DC Metro List Fastest Growing; Washington Business Journal: Fastest Growing Companies, Top Performing Small Technology Companies in Greater D.C.

Culture | Northern Virginia Technology Council Tech 100 Honoree; Virginia Best Place to Work; Washington Business Journal: Best Places to Work, Corporate Diversity Index Winner - Mid-Size Companies, Companies Owned by People of Color; Department of Labor's HireVets for our work helping veterans transition; SECAF Award of Excellence finalist; Victory Military Friendly Brand; Virginia Values Veterans (V3); Cystic Fibrosis Foundation Corporate Breath Award

Benefits

We offer competitive benefits package including paid time off, healthcare benefits, supplemental benefits, 401k including an employer match, discount perks, rewards, and more. We invest in our employees - Every employee is eligible for education reimbursement for certifications, degrees, or professional development. Reimbursement amounts may fluctuate due to IRS limitations. We want you to grow as an expert and a leader and offer flexibility for you to take a course, complete a certification, or other professional growth and networking. We are committed to supporting your curiosity and sustaining a culture that prioritizes commitment to continuous professional development.

We work hard; we play hard. Kentro is committed to incorporating fun into every day. We dedicate funds for activities - virtual and in-person - e.g., we host happy hours, holiday events, fitness & wellness events, and annual celebrations. In alignment with our commitment to our communities, we also host and attend charity galas/events. We believe in appreciating your commitment and building a positive workspace for you to be creative, innovative, and happy.

Commitment Equal Opportunity Employment & VEVRAA

Kentro is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state or local law.

Kentro is strongly committed to compliance with VEVRAA and other applicable federal, state, and local laws governing equal employment opportunity. We have developed comprehensive policies and procedures to ensure our hiring practices align with these requirements.

As part of our VEVRAA compliance efforts, Kentro has established an equal opportunity plan outlining our commitment to recruiting, hiring, and advancing protected veterans. This plan is regularly reviewed and updated to ensure its effectiveness.

We encourage protected veterans to self-identify during the application process. This information is strictly confidential and will only be used for reporting and compliance purposes as required by law. Providing this information is voluntary and will not impact your employment eligibility.

Our commitment to equal employment opportunity extends beyond legal compliance. We are dedicated to fostering an inclusive workplace where all employees, including protected veterans, are treated with dignity, respect, and fairness.

How to Apply

To apply to Kentro Positions- Please click on the job link and then click the blue "Apply" button at the top right of Job Description. Please upload your resume and complete all the application steps. You must fully submit the application for Kentro to consider you for a position. If you need alternative application methods, please email careers@kentro.us and request assistance.

Accommodations

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. Reasonable Accommodations may be made to enable qualified individuals with disabilities to perform the essential functions. If you need to discuss reasonable accommodations, please email careers@kentro.us .

#LI-