ISSM
About the role
Classified Information Systems Security Manager (P4) — onsite position in Richardson, TX. The ISSM serves as the primary cybersecurity authority for assigned classified and controlled information systems, responsible for end-to-end execution and oversight of cybersecurity activities in compliance with DoD laws, regulations, and contractual requirements. This role independently leads system authorization, continuous monitoring, inspection readiness, and risk management activities while providing technical oversight and mentorship to Information Systems Security Officers (ISSOs).
Citizenship: US Citizens only. Clearance: Active DoD Secret clearance required day one. Education: University degree with minimum 8 years relevant experience, or advanced degree in a related field with minimum 5 years. Certification: IAM Level III compliant with DoD 8570/8140 (e.g., CISSP, CISM, GSLC). Shift: Monday–Friday, normal working hours; no weekend hours expected. Travel: Posting states “no travel expected” in one section and “willing to travel domestically up to 20%” in another.
Responsibilities
- Independently own cybersecurity responsibilities for assigned information systems, ensuring security objectives are achieved and organizational risk is effectively managed.
- Serve as primary cybersecurity authority for inspections, assessments, audits, and continuous monitoring; lead preparation, execution, and response activities to maintain authorization and inspection readiness.
- Execute and maintain system authorization using the Risk Management Framework (RMF) and applicable guidance, including JSIG for Special Access Program systems and DAAG for DoD collateral systems.
- Maintain awareness and working knowledge of DD Form 254s and contractual security requirements; ensure cybersecurity controls, inspection scope, and authorization boundaries align with approved mission and program objectives.
- Develop, maintain, and validate cybersecurity plans, authorization artifacts, and compliance documentation to support audit-ready operations.
- Identify, assess, and communicate cybersecurity risk to senior leadership and Authorizing Officials, including impact of system changes, vulnerabilities, inspection findings, and authorization conditions.
- Lead continuous monitoring activities, including evaluation of security posture, validation of control effectiveness, and tracking of security-relevant data.
- Develop, manage, and drive closure of Plans of Action and Milestones (POA&Ms) resulting from inspections, assessments, and continuous monitoring.
- Lead and oversee cybersecurity Change Control Boards (CCBs), evaluating proposed system changes for security impact, authorization implications, and RMF alignment.
- Execute or coordinate corrective and protective security actions from inspections, continuous monitoring, or identified cybersecurity incidents.
- Engage with Program Managers to integrate cybersecurity requirements into program execution, schedules, and decision-making; address risk impacts to cost, scope, and mission delivery.
- Collaborate with cross-functional teams (IT, Facilities, Industrial Security) to ensure cybersecurity requirements are integrated into technical, physical, and operational environments.
- Coordinate with other cybersecurity teams across the enterprise to ensure consistent implementation of cybersecurity processes, standards, and authorization practices.
- Provide technical direction and mentoring to ISSOs to ensure consistent execution of RMF activities, inspection readiness, and quality of authorization artifacts, while remaining accountable for cybersecurity outcomes.
- Prepare and deliver cybersecurity status reporting to senior leadership, summarizing authorization posture, inspection readiness, risk trends, POA&Ms, and significant cybersecurity issues.
Requirements
- Active DoD Secret Security Clearance on day one.
- IAM Level III certification compliant with DoD 8570/8140 (e.g., CISSP, CISM, GSLC).
- University degree with minimum 8 years prior relevant experience, or advanced degree in a related field with minimum 5 years.
- Experience performing ISSM responsibilities for classified or controlled information systems.
- Advanced knowledge of RMF and DoD system authorization processes.
- Experience executing authorization and continuous monitoring using JSIG and/or DAAG.
- Knowledge of cybersecurity regulations, contractual requirements, and DD Form 254 interpretation.
- Experience supporting inspections, assessments, and audit activities.
- Ability to independently assess risk and communicate cybersecurity status to leadership.
- Willingness to travel domestically up to 20% (generally supporting other company facilities).
Qualifications
- Master’s degree in Cybersecurity, Computer Science, or a related field.
- Experience as the primary ISSM for SAP and/or DoD collateral systems.
- Experience owning ATOs and driving POA&M closure.
- Experience mentoring ISSOs and providing technical oversight.
- Experience leading Change Control Boards (CCBs).
- Experience working with cross-functional teams and enterprise cybersecurity organizations.
- Strong written and verbal communication skills for senior leadership briefings.
Skills
- Security
- Cyber security
- Security+
- Security clearance
- Active secret clearance
- Vulnerability
- CISSP
- SAP
- DoD collateral systems
- POAM
- CCBs
Pay
Hourly range: $50.00 – $75.00/hr. Individual compensation within this range depends on qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other job-related factors.
Benefits
- Medical, dental & vision
- Critical Illness, Accident, and Hospital coverage
- 401(k) Retirement Plan (pre-tax and Roth post-tax contributions available)
- Life Insurance (Voluntary Life & AD&D for employee and dependents)
- Short and long-term disability
- Health Spending Account (HSA)
- Transportation benefits
- Employee Assistance Program
- Time Off/Leave (PTO, Vacation or Sick Leave)
Schedule
Full-time, Monday–Friday, normal business hours; no weekend hours expected. Fully onsite in Richardson, TX.
Location & employment type
Contract position based in Richardson, TX. Experience level: Expert. Application deadline: October 31, 2026.