Information Systems Security Manager (ISSM)

Salary: $130,000 - 150,000 per year Requirements: 6–15 years of experience. Bachelors degree required. Active Top Secret clearance with SCI eligibility required. DoD 8570/8140 IAM III certification required. U.S. citizenship required. Strong technical expertise in Linux systems, including assessment, configuration, and hardening. Experience with cyber scorecards, ACAS and SCAP scans, STIG reviews, vulnerability analysis, and RMF accreditation activities. Ability to work independently and collaboratively, and to lead and mentor a technical team. Responsibilities: Plan and coordinate security accreditation reviews and risk analyses for new and existing systems and networks; recommend suitable safeguards and countermeasures based on findings. Apply the NIST Risk Management Framework (RMF) and act as the primary security contact for assigned systems. Work with stakeholders to create security plans and policies, advise leadership on cybersecurity status, and educate stakeholders on cybersecurity practices and processes. Develop and implement security programs, policies, and procedures in accordance with System Security Plans (SSPs), and contribute to RMF activities and documentation. Participate in system and network design to ensure appropriate security controls are implemented. Guide system owners on DITPR and eMASS registration and data categorization. Assess and report organizational security performance and compliance metrics using cyber scorecard experience. Run ACAS and SCAP scans and manually review STIG checklists. Support preparation of Security Assessment Plans (SAPs), identify system impacts, and account for existing risk mitigation strategies. Create Plans of Action and Milestones (POA&Ms) from assessment results and maintain traceability from vulnerabilities through remediation. Analyze vulnerabilities to support mitigation and residual risk decisions; manage remediation timelines and validate closure of POA&M items. Perform and oversee eMASS data entry and support continuous monitoring, using ISCM results to inform ongoing authorization requirements. Develop, review, and maintain RMF accreditation packages and author and maintain SSPs. Execute and oversee all stages of the RMF process and evaluate security controls and compliance across hardware and software systems. Lead and mentor two ISSOs and two ISSEs, providing technical direction, task management, and professional development. Develop and maintain authorization artifacts, including Configuration Management Plans, Contingency Plans, Incident Response Plans, and Privacy Impact Assessments. Prepare executive-level security reports and dashboards for leadership and oversight bodies. Review Information Assurance Vulnerability Alerts and ensure timely compliance. Prepare, review, and submit ATO, IATT, and continuous authorization packages to the Authorizing Official. Coordinate with the Authorizing Official, Security Control Assessor, and Information System Owner throughout the authorization lifecycle. Maintain compliance with applicable DoD, federal, and agency cybersecurity directives, including DoDI 8500.01, DoDI 8510.01, and NIST SP 800-37/800-53. Technologies: Hardware IAM Support Linux Network Security SAP More: We are seeking an Information Systems Security Manager to support our prime contract at Fort Belvoir, Virginia. TekSynap is a growing high-tech company focused on applying information technology to meet the needs of federal government customers. The role is based in an office with a low noise level, follows a Monday–Friday day shift, may require occasional evening or weekend work, and involves approximately 10% travel. The work includes regular standing, walking, sitting, reaching, handling objects, and lifting; reasonable accommodations may be available. Our full-time benefits include health, dental, and vision coverage, a 401(k), life insurance, short- and long-term disability plans, vacation, and holidays. The target salary range is $130,000–$150,000, with final compensation based on relevant qualifications, experience, and contract and organizational factors. Employees must follow vaccination requirements applicable to the contract, law, or regulation. We are a drug-free workplace and provide equal employment opportunities. last updated 41 week of 2026