INFORMATION SYSTEM SECURITY MANAGER (ISSM)

MCCS Job Opening Information

Position/GradeInformation System Security Manager (ISSM), NF4 LocationHeadquarters (Quantico, VA)Type of AppointmentFLEXOpen Date24 August 2026Close Date08 September 2026Who May ApplyOpen to All SourcesSalary$47.11 - $56.73 / HourlyHours of OperationMonday - Friday [ ] Health Card Required[X ] Background Check Required[ ] Gun Control[ ] Drug Testing Position (DTP)[ ] Valid Drivers License Required

Job Summary

Marine Corps Community Services (MCCS) is looking for the best and brightest to join our Team! MCCS is a comprehensive program that supports and enhances the quality of life for Marines, their families, and others in the Marine Corps Community. We offer a team-oriented environment comprised of military personnel, civilian employees, contractors and volunteers who keep the organization functioning smoothly and effectively. As a service-oriented organization, we never waver in our commitment to our Corps.

This position is located at Headquarters (Quantico, VA). Candidates selected for this position will serve as a Information System Security Manager (ISSM), NF4.

Resume limited to two pages.

Major Duties

This position serves an Information System Security Manager (ISSM) for the Information Technology Directorate (MRI), NAF Business and Support Services Division (MR), Manpower and Reserve Affairs Department, Headquarters Marine Corps. The incumbent will provide compliance guidance and tracking for Marine Corps NAFI activities at installations and assist with the improvement of compliance items to Marine Corps installations worldwide.

• Conducts targeted vulnerability assessments via Tenable to identify and prioritize system risks and ensuring infrastructure alignment with strict DISA STIG baselines.
• Generate detailed analytical reports and executive summaries on vulnerabilities and configuration gaps
• Performs security compliance efforts IAW the Payment Card Industry (PCI), Federal Information Security Modernization Act (FISMA), National Institute of Standards and Technology Special Publication (NIST SP) 800 series, Federal Information Processing Standards (FIPS) series, and USMC related policies and procedures.
• Manages scanner configurations, including target IP ranges, schedules, authentication credentials, plugin updates, and STIG audit files.
• Works closely with and receives reports from Program Manager(s), Cyber operational personnel, and system administrators.
• Conducts assessments of continuous monitoring targets, assess level of risk, IT policy deviations from acceptable configurations, and develops and/or recommends appropriate plan of actions and milestones (POA&M).
• Promotes IT security awareness to the user community by validating the user community is completing annual security training.
• Coordinates with all departments within the Marine Corps Community Services (MCCS) and higher Marine Corps to support cybersecurity awareness initiatives.

Occasional travel to complete work assignments, conduct training or attend conferences and meetings may be required. Performs other related duties as assigned.

This is a white-collar position where occasional lifting up to 20 lbs. may be required.

Performs other duties as assigned.

Qualifications

Five or more years of experience performing specific tasks for Information System Security Manager (ISSM), security assessments, vulnerability management, or cybersecurity (CY). Demonstrated proficiency in applying vulnerability logic and correlation to relevant assets; tracking and processing remediation actions; performing incident handling and reporting; analyzing, determining, and mitigating risk to servers, applications, and network equipment. Applicable education may be substituted for years of experience.

Knowledge of risk management processes, secure configuration management techniques, Government laws and policies, cyber threats and vulnerabilities, encryption algorithms, host/network access control mechanisms, vulnerability information dissemination sources, Payment Card Industry (PCI) data security standards, Personally Identifiable Information (PII) data security standards, incident response and handling methodologies, intrusion detection methodologies and techniques for detecting host and network-based intrusions, and organizations risk tolerance and/or risk management approach.

Skill in applying security controls, analyzing traffic to identify network devices, conducting application vulnerability assessments, assessing security systems designs, interpreting vulnerability scanner results to identify vulnerabilities, assessing cloud security measures and microservices, preparing Test & Evaluation reports, and running Security Content Automation Protocol (SCAP) content and Security Technical Implementation Guides (STIGS) based tools for benchmark, compliance checks, and security configuration reviews.

Ability to identify systemic security issues based on the analysis of vulnerability and configuration data, apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation), conduct vulnerability scans and recognize vulnerabilities in security systems, and translate data and test results into evaluative conclusions.

As an authorized and privileged user of Department of Defense Information Systems, must fulfill the requirement to complete DoD Workforce Improvement Program certification (DoD 8570.01-M) as a condition of access within six months of employment. This position has been determined as a Basic proficiency level ISSM.

This position had been determined as Moderate Risk. As a condition of employment, the incumbent must be able to obtain and maintain an Access National Agency Check and Inquiries (ANACI/ Tier 3) Secret Clearance to access classified information.

How To Apply

All applications must be submitted online via the MCCS Careers website.

Resumes/applications emailed or mailed will not be considered for this vacancy announcement. Resumes with more than two pages or personal photographs will not be considered for this vacancy. To be considered for employment, the application or resume must be submitted online by 11:59 PM (ET) on the closing date of the announcement.

Note: To check the status of your application or return to a previous or incomplete application, log into your MCCS user account and review your application status.

Closing Statement

GENERAL INFORMATION: Applicants are assured of equal consideration regardless of race, age, color, religion, national origin, sex, GINA, political affiliation, membership or non-membership in an employee organization, marital status, physical handicap which has no bearing on the ability to perform the duties of the position. This agency provides reasonable accommodations to applicants with disabilities. If you need a reasonable accommodation for any part of the application and hiring process, please notify the agency. The decision on granting reasonable accommodation will be on a case-by-case basis.

It is Department of Navy (DON) policy to provide a workplace free of discrimination and retaliation. The DON No Fear Act policy link is provided for your review: https://www.secnav.navy.mil/donhr/Site/Pages/No-Fear-Act.aspx

As part of the employment process, Human Resources Division may obtain a Criminal Record Check and/or an Investigative Consumer Report. Employment is contingent upon the successful completion of a National Agency Check and Inquiries (NACI). For all positions requiring access to firearms or ammunition, the Federal Government is prohibited from employing individuals in these positions who have ever been convicted of a misdemeanor crime of domestic violence, or a felony crime of domestic violence adjudged on or after 27 November 2002. Selectees for such positions must submit a completed DD Form 2760, Qualification to Possess Firearms or Ammunition, before a final job offer can be made.

Direct Deposit of total NET pay is mandatory as a condition of employment for all appointments to positions within MCCS.

Required Documents:

• Education/certification certificate(s), if applicable.
• If prior military, DD214 Member Copy
• Resume that does not exceed 2 pages

IMPORTANT: To align with the Merit Hiring Plan, Federal Agencies will not accept resumes that exceed two pages. Accordingly, the NAF HRO will only consider resumes that are two pages or fewer. Resumes exceeding this limit will not be referred and will be deemed ineligible for consideration.

This activity is a Drug-free workplace. The use of illegal drugs by NAF employees, whether on or off duty, cannot and will not be tolerated. Federal employees have a right to a safe and secure workplace, and Marines, sailors, and their family members have a right to a reliable and productive Federal workforce.

Involuntarily separated members of the armed forces and eligible family members applying through the Transition Assistance Program must submit a written request/statement (may be obtained from the MCCS Human Resources Office) and present ID card with "TA" stamped in red on front of card.

INDIVIDUALS SELECTED FROM THIS ANNOUNCEMENT MAY BE CHANGED TO PART-TIME OR FULL-TIME AT MANAGEMENTS DISCRETION WITHOUT FURTHER COMPETITION.

ALL ONLINE APPLICATIONS MUST BE RECEIVED BY 1159PM EASTERN TIME (ET) ON THE CLOSING DATE LISTED IN THE JOB POSTING.