Information Systems Security Manager

Job Summary

Leading the enterprise implementation of the NIST Risk Management Framework (RMF), the full-time remote Information Systems Security Manager (ISSM) will manage the Assessment & Authorization (A&A) lifecycle for FISMA systems and provide cybersecurity guidance to System Owners.

Key responsibilities

• Oversee the development and approval of System Security Plans (SSPs) and related documentation for NIH/OD information systems
• Manage continuous monitoring activities to ensure ongoing security authorization and compliance with federal cybersecurity requirements
• Supervise and mentor Information System Security Officers (ISSOs) while coordinating with various stakeholders throughout the authorization process

Required qualifications

• Public Trust Clearance or ability to obtain one
• B.S. in Computer Science, Information Technology, or a related field
• 7+ years of experience supporting Federal cybersecurity programs
• 5+ years in a leadership role such as ISSM, Senior ISSO, or Security Manager
• Active CISSP, CISM, CAP, GSLC, or Security+ certification