CISSP - Certified Information Systems Security Professional, Change Control, CompTIA Security+, Computer Firmware, Computer Security, Configuration Management, Corrective Action, DoD Directive 8140, DoD Directive 8570, Documentation, Government Contracts, IAT - Information Assurance Technical, Incident Response, Information Technology/Systems Audit, Information/Data Security (InfoSec), Internet Security, Linux Operating System, Maintain Compliance, Microsoft Windows Operating System, Risk Analysis, SAP, Security Analysis, Security Monitoring, Security Software, Systems Administration/Management, Systems Analysis, U.S. National Institute of Standards and Technology (NIST), United States Department of Defense (DoD)
Zachary Piper Solutions is seeking an Information Systems Security Manager (ISSM) to support a prime contractor supporting the Department of Defense. This position is onsite in Colorado Springs, CO. This is a direct-hire opportunity supporting a national leader in secure systems and classified cybersecurity operations.
The Information Systems Security Manager (ISSM) will lead and manage all aspects of an Information Protection Program for classified environments. This role ensures accreditation, compliance, and continuous monitoring of systems across multiple classification levels while supporting mission-critical cybersecurity operations.
Responsibilities for the Information Systems Security Manager (ISSM) include:
- Lead Authority to Operate (ATO) efforts, including preparation, submission, and sustainment of accreditation packages
- Ensure compliance with DoD RMF, NIST SP 800-53, CNSSI, and other cybersecurity frameworks and directives
- Perform vulnerability assessments and risk analyses to support system authorization decisions
- Develop and maintain RMF documentation, including SSPs, SAPs, RARs, POA&Ms, and Continuous Monitoring Plans
- Coordinate security assessments, system audits, and authorization activities with internal and external stakeholders
- Oversee incident response activities, including reporting, mitigation, and corrective action implementation
- Manage configuration control and security of hardware, software, and firmware within classified systems
Required Qualifications for the Information Systems Security Manager (ISSM) include:
- Bachelor's degree in Information Security, Cybersecurity, or related field (or equivalent experience); 7-9+ years of relevant experience
- Strong experience with RMF, NIST frameworks, CNSSI guidance, and system accreditation processes
- Background supporting classified environments, including SAP and/or SCI programs
- Active Top Secret clearance with SCI eligibility and willingness to undergo polygraph
- DoD 8140 IAT Level II certification (e.g., Security+, CISSP, or equivalent)
- Experience with system administration and security practices in Windows and Linux environments
- Knowledge of data handling procedures across classification levels, including secure transfer and labeling
Compensation for the Information Systems Security Manager (ISSM) includes:
- Salary Range: Competitive based on experience
- Full Benefits Package: PTO, Paid Holidays, Medical, Dental, Vision, 401K, Tuition Reimbursement, Paid Maternity Leave, Military Reserve Pay Offset
#LI-KG1 #LI-ONSITE
Keywords:
ISSM, ISSO, RMF, NIST 800-53, CNSSI 1253, ATO, cybersecurity, information assurance, DoD, SAP, SCI, eMASS, XACTA, ACAS, Nessus, STIGs, Splunk, vulnerability assessment, incident response, continuous monitoring, POA&M, SSP, Colorado Springs, Top Secret Clearance