Information Systems Security Manager (ISSM), TS/SCI

Location: Arlington, VA

Department: Research & Development Sector

• We are seeking a highly skilled Information Systems Security Manager to join our team. The successful candidate will be responsible for ensuring the security of our information systems and data in accordance with government regulations and industry standards. This role requires a deep understanding of defense-specific security requirements and a commitment to protecting sensitive information.

  Key Responsibilities:

  • Develop, implement, and maintain information security policies, procedures, and controls in compliance with government regulations, including NIST SP 800-171, DFARS, and ITAR.
  • Maintains Authorities to Operate (ATOs)
  • Conduct regular security assessments and audits to identify vulnerabilities and ensure compliance with contractual and regulatory requirements.
  • Coordinate with government agencies, auditors, and other stakeholders to ensure compliance with security requirements and regulations.
  • Monitor and respond to security incidents, including conducting investigations and implementing corrective actions as needed.
  • Manage security tools and technologies, such as firewalls, intrusion detection/prevention systems, and encryption tools, to protect against cyber threats.
  • Provide guidance and support on security best practices and procedures.
  • Stay current on emerging threats and technologies in the defense and cybersecurity domains.
  • Prepare and present reports to senior management and government stakeholders on the organization's security posture and compliance status.

  Qualifications:

  • Bachelor's degree in computer science, information technology, or a related field.
  • IAT Level III Certification (CISSP, etc.)
  • TS/SCI Clearance
  • 5+ years of experience in information security in a government defense contracting environment preferred.
  • Deep understanding of government security regulations and standards, including NIST SP 800-171, DFARS, and ITAR.
  • Strong knowledge of security technologies and tools, including firewalls, IDS/IPS, SIEM, and encryption.
  • Excellent understanding of security risk management principles and practices.
  • Experience leading security incident response and investigations.
  • Familiarity with CERT/CISA Advisories preferred.
  • Familiarity with JSIG preferred.