Information System Security Manager (ISSM)
About the role
The Defense Sector at Leidos is seeking an Information System Security Manager (ISSM) to support a fast‑paced program with the Air Force Life Cycle Management Center. The ISSM will oversee the cybersecurity posture of DoD information systems, develop and implement security policies, conduct risk assessments, manage system accreditations (RMF), and lead continuous monitoring efforts. This position requires 100% on‑site work with no remote work supported.
Primary Responsibilities
- Act as the Subject Matter Expert (SME) on cybersecurity compliance and information assurance.
- Collaborate daily with assigned ISSOs and Cyber Security Engineers to execute the continuous monitoring process with full system observability.
- Manage the operational cybersecurity posture of assigned networks through coordination with NOC/SOC and Cloud Teams.
- Facilitate approval processes for Authorization to Operate (ATO), Authority to Extend (ATE), Authorization to Connect (ATC), and Interconnection Security Agreements (ISA), submitting evidence artifacts and obtaining endorsements.
- Develop, implement, and maintain security policies, procedures, and documentation to ensure compliance with DoD security standards and regulations (e.g., NIST, RMF, FISMA).
- Oversee the security posture of DoD information systems, ensuring confidentiality, integrity, and availability requirements are met.
- Perform risk assessments, vulnerability assessments, and security audits; provide remediation strategies.
- Manage and conduct continuous monitoring of security controls to protect classified and unclassified data.
- Coordinate with cross‑functional teams (engineering, IT, operations) to implement and enforce security protocols and best practices.
- Ensure the accreditation process for DoD systems (e.g., RMF accreditation) is completed and maintained in compliance with all applicable requirements.
- Serve as the primary point of contact for security‑related issues, coordinating incident response and reporting to senior management and government customers.
- Provide security training and awareness programs for personnel operating DoD systems.
- Maintain and track security documentation, including system security plans (SSPs), risk assessments, and Plans of Action & Milestones (POA&Ms).
- Stay current with emerging cybersecurity threats, vulnerabilities, and trends to adapt the program to evolving security challenges.
Basic Qualifications
- U.S. Citizen with an active Top Secret clearance and ability to obtain a SCI prior to start date.
- Bachelor’s degree with 8+ years of experience, or Master’s degree with 6+ years of experience (additional experience may substitute for a degree).
- CISSP, CISM, or similar cybersecurity certification.
- In‑depth knowledge of DoD cybersecurity policies, frameworks, and compliance standards (e.g., NIST 800‑53, RMF, FISMA, ICD 503, JSIG).
- Experience with cloud computing and building/maintaining an ATO for cloud‑based information systems.
- Experience with system security engineering, risk management, and vulnerability assessments.
- Strong understanding of cloud security, network security, security controls, and common cybersecurity tools (firewalls, IDS/IPS, SIEM, endpoint protection).
- Ability to work independently and collaborate effectively with cross‑functional teams.
- Strong communication skills, including creating and presenting detailed security reports to stakeholders.
Preferred Qualifications
- U.S. Citizen with an active TS/SCI security clearance.
- Experience managing security for complex DoD programs or mission‑critical systems.
- Experience with security tools for vulnerability scanning, penetration testing, and security auditing.
- Advanced security certifications (e.g., CISA, CEH, CSSP, etc.).
- Experience with configuration management and change management processes in a secure environment.
- Experience with automation and the continuous ATO (cATO) process.
- Cloud security certifications (e.g., Azure Security Technologies or AWS Certified Security Specialty).
Pay Range
$107,900.00 – $195,050.00 (Leidos pay range is a guideline; actual compensation depends on responsibilities, education, experience, skills, internal equity, market data, and applicable agreements.)
Benefits
- Competitive compensation
- Health and Wellness programs
- Income Protection
- Paid Leave
- Retirement plans
About Leidos
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, Leidos employs approximately 47,000 people worldwide and reported annual revenues of about $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.leidos.com.