Information System Security Manager (ISSM)

About the role

Specialty Systems, Inc. is seeking an Information System Security Manager (ISSM) to support a Department of Defense customer at Joint Base MDL. This high-profile role involves overseeing cybersecurity activities during the development and qualification of systems used for DoD missions, ensuring compliance with DoD standards and protecting sensitive data. The ISSM will develop and implement security policies, conduct risk assessments, manage RMF accreditations, and lead continuous monitoring efforts while collaborating with cross-functional teams and program stakeholders.

Responsibilities

• Provide technical leadership and management of a team of cybersecurity engineers, analysts, and information assurance personnel.
• Serve as the program’s Subject Matter Expert (SME) for DoD, DoN, and DISA cybersecurity policies, requirements, and compliance activities.
• Develop, implement, and maintain cybersecurity strategies supporting networked systems and System of Systems architectures deployed at USN and USMC installations.
• Guide contractor teams in implementing cybersecurity requirements throughout system design, development, integration, testing, deployment, and sustainment activities.
• Lead Risk Management Framework (RMF) activities, including preparation, review, and maintenance of accreditation and Authorization to Operate (ATO) packages.
• Review system architectures, interface designs, and engineering documentation to ensure cybersecurity requirements are incorporated into all system lifecycle phases.
• Coordinate vulnerability assessments, security testing, remediation efforts, and cybersecurity readiness reviews.
• Monitor cybersecurity risks and develop mitigation plans to ensure compliance with government requirements and mission objectives.
• Interface with Government program managers, engineers, Authorizing Officials, Security Control Assessors, and other stakeholders to resolve cybersecurity issues.
• Provide technical guidance regarding NIST controls, DISA STIG implementation, cybersecurity engineering, boundary protection, and secure network design.
• Prepare cybersecurity status reports, risk assessments, briefings, and recommendations for senior Government and contractor leadership.
• Support cybersecurity audits, inspections, and compliance reviews conducted by Government agencies.
• Develop and maintain cybersecurity documentation, policies, procedures, plans, and artifacts required for program execution.
• Prepare and deliver presentations to Government and contractor audiences, including program-level or large stakeholder groups.
• Use Microsoft Office applications (Word, Excel, PowerPoint, and Teams) effectively.
• Travel up to 25% of the time.

Qualification Requirements

• A Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field with 10+ years of cybersecurity experience, including 5+ years supporting DoD or Department of the Navy (DoN) programs.
• OR a Master’s degree in Cybersecurity, Information Assurance, Engineering, or a related field with 8+ years of relevant experience.
• OR Military Service School, technical certification(s), and 15+ years of demonstrated experience in cybersecurity, information assurance, network engineering, and DoD system accreditation activities.
• Must have an active Secret level or higher clearance.
• Experience supporting cybersecurity compliance activities during the development, integration, accreditation, and sustainment of networked Systems of Systems (SoS) and enterprise information technology environments is highly desired.

Desired Technical Skills

• Navy Marine Corps Intranet (NMCI), Marine Corps Enterprise Network (MCEN), or other Navy/Marine Corps operational networks.
• System of Systems engineering and integration.
• Secure cloud, hybrid-cloud, and tactical network environments.
• Cybersecurity support to major acquisition programs and DoD acquisition lifecycle processes.
• Vulnerability management tools, security monitoring platforms, and continuous monitoring programs.
• Zero Trust implementation and cybersecurity architecture development.
• Preferred certifications include CISSP, CASP+, CISM, GSLC, or equivalent DoD 8140/8570-compliant certification.

U.S. citizenship is required due to the nature of work performed within our facilities.

Schedule

This position follows a compressed work schedule consisting of four 9-hour days (Monday–Thursday) and an 8-hour day (Friday) during the first week of a cycle, followed by four 9-hour days (Monday–Thursday) with the Friday off during the second week, resulting in a 3-day weekend every other week.