Information System Security Manager (ISSM)

About the role

***AWARD PENDING*** Titan Technologies is seeking a Information System Security Manager (ISSM) to support a mission-focused Government customer by delivering the full lifecycle of services needed to advance and modernize critical software capabilities. This includes developing, testing, integrating, and deploying enhancements to existing systems, as well as enabling the delivery of new and emerging requirements that drive mission success. At a strategic level, the program establishes a unified and optimized Operations and Sustainment framework for legacy environments, incorporating Human-Centered Design principles to improve usability and effectiveness. By strengthening a Continuous Release model within the DevSecOps pipeline and expanding automation through robust Continuous Integration and Continuous Delivery (CI/CD) practices, it ensures the stability, integrity, and responsiveness of legacy applications and services, enabling faster delivery of new features, security advancements, and integrated products, and supporting long-term system performance and mission readiness.

The ISSM leads and manages cybersecurity efforts across enterprise applications and systems, ensuring compliance with risk management frameworks (RMF), secure software development lifecycles, and Intelligence Community (IC) standards. This role includes managing accreditation, conducting risk assessments, vulnerability testing, and collaborating with cross-functional teams to maintain the highest standards of information security.

Responsibilities

• Oversee cybersecurity measures for applications in Agile and DevSecOps environments.
• Design and develop secure systems, applications, and enterprise-wide cyber solutions.
• Ensure system security needs are addressed across development, operations, testing, certification, and accreditation.
• Conduct risk assessments, system hardening, vulnerability scanning, and incident response.
• Manage assessment and authorization (A&A) efforts, including reaccreditation.
• Track and manage Plan of Action and Milestones (POAMs) and recommend remediation.
• Facilitate technical exchange meetings (TEMs) and coordinate with key stakeholders.
• Develop security evaluation test plans and drive secure software development lifecycle practices, including containerization security per NIST