Information Systems Security Manager

About the role

The Department of War (DoW) information systems require continuous, disciplined oversight to stay authorized to operate and defensible against evolving threats. As a Senior Information System Security Manager (ISSM), you will own that oversight—serving as the principal cybersecurity authority for one or more system authorization packages across their full lifecycle.

Responsibilities

• Manage the RMF process end-to-end: categorizing systems, selecting and tailoring controls, overseeing assessment and authorization activities, and maintaining continuous monitoring posture after ATO.
• Supervise a team of ISSOs, assigning control families, reviewing their work, and consolidating it into authoritative packages in eMASS.
• Coordinate directly with Authorizing Officials (AO), Authorizing Official Designated Representatives (AODR), Security Control Assessors (SCA), and program leadership to resolve findings, manage POA&Ms, and drive packages to authorization on schedule.
• Set standards for documentation and artifact management, train and mentor ISSOs, and represent the security posture of your systems to senior stakeholders.

Requirements

• 8+ years of experience in cybersecurity compliance, information assurance, or IT security operations.
• Experience serving as an ISSM, ISSO, or RMF authorization role on DoD/DoW systems.
• Experience managing RMF Steps 1-6: Categorize through Authorize, and Step 7: Continuous Monitoring.
• Experience with eMASS, including authorization package development, control implementation statements, POA&M management, and artifact and evidence management.
• Experience supervising or mentoring ISSOs or junior compliance staff.
• Experience preparing systems for and supporting compliance audits, inspections, or assessments.
• Able to communicate security risk and compliance status clearly to senior leaders, AOs, and SCAs.
• TS/SCI clearance.
• Bachelor's degree.
• DoD 8570/8140 IAM Level III certification.

Qualifications

• Nice if you have:
• Experience with defense or national security issues in a specific theater or combatant command environment.
• Experience working at a DoD/DoW Command-level Headquarters.
• Experience with CNSSI 1253, NIST SP 800-53B, and DoD-specific overlays.
• Experience developing internal SOPs, naming conventions, or governance frameworks for artifact and control management.
• Experience with system boundary changes, categorization changes, or reauthorization packages.
• Experience hiring, interviewing, or building out a compliance team.
• Knowledge of cloud-hosted DoD systems, such as AWS, Azure, or GCP.
• Master's degree.

Skills

• Technical depth in NIST SP 800-53/800-37/800-137.
• Leverage of leadership to run a compliance program.

Benefits

• Health, life, disability, financial, and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.

Pay

The projected compensation range for this position is $86,900.00 to $198,000.00 (annualized USD).

Schedule

Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits.

Identity Statement

We will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

Candidate AI Usage Policy

The use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.

Work Model

Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.