Information System Security Manager (ISSM)
Position Title: Information System Security Manager (ISSM)
Department/Location: Security – Cyber /Oklahoma City, OK
Status: Regular/Full-Time (Exempt)
_____________________________________________________________________________
Primary Function:
We are seeking a highly skilled and experienced Information Systems Security Manager (ISSM) to join our Security team within a Department of Defense (DoD) contractor environment. The ISSM is responsible for overseeing the cybersecurity posture of sensitive information systems, ensuring compliance with DoD, NIST, and company policies. This role serves as the principal advisor on all matters involving the security of information systems and will directly support the Facility Security Officer (FSO), Information System Security Officer (ISSO), and other stakeholders.
Essential Responsibilities:
- Serve as the subject matter expert on cybersecurity and risk management for classified information systems.
- Develop, implement, and maintain System Security Plans (SSPs), Risk Management Framework (RMF) documentation, and security-related policies.
- Ensure compliance with DoD regulations including NIST SP 800-53, NISPOM, DAAPM, DFARS, and other applicable frameworks.
- Manage and maintain accreditation of information systems under the RMF process; conduct continuous monitoring activities.
- Oversee vulnerability scanning, patch management, and system auditing activities.
- Coordinate incident response and investigation efforts for cybersecurity incidents.
- Conduct and support security audits, inspections, and assessments conducted by the Defense Counterintelligence and Security Agency (DCSA) or other government entities.
- Provide cybersecurity training and awareness to employees and system users.
- Collaborate with IT, engineering, and program managers to ensure cybersecurity is embedded in system lifecycle management.
- Maintain detailed records of system configurations, changes, and security controls in accordance with regulatory and company standards.
- Demonstrate strong verbal and written communication skills in English to effectively convey information across all levels of the organization.
- Capable of working independently, managing tasks, and making sound decisions with minimal supervision.
- Willingness to take on additional responsibilities and perform other related duties as assigned to support organizational goals.
- Maintaining a working knowledge of system functions, security policies, technical security safeguards, and operational security measures.
- Possessing sufficient experience, commanding adequate resources, and being organizationally aligned to ensure prompt support and successful execution of a robust system security program.
Work Conditions & Physical Requirements:
- Office-based with some travel to secure facilities and partner sites as required.
- May require occasional work outside normal business hours to support security operations and incident response.
Job Requirements:
Minimum Requirements:
- Possess an active DoD TOP SECRET security clearance at the time of hire (verification required).
- Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or related field.
- 5+ years of experience in information systems security or related field, preferably in a DoD contractor environment.
- Industry certification such as CISSP, CISM, or GSLC (or DoD 8570.01-M IAM Level III equivalent).
- Strong knowledge of RMF, NIST 800-53 controls, and information system accreditation processes.
- Experience working with tools such as eMASS, ACAS, Nessus, and other cybersecurity management platforms.
Preferred Requirements:
- Experience as an ISSM supporting classified DoD programs.
- Working knowledge of Insider Threat and Industrial Security Program requirements.
- Familiarity with cloud security principles in classified environments (e.g., IL5/IL6 environments).
EOE AA M/F/Vet/Disability
APPLY NOW