Information Systems Security Manager (ISSM) (On-Site)

Date Posted:

2026-03-23

Country:

United States of America

Location:

US-MA-WESTFORD-WFD7 ~ 7 Technology Park Dr ~ BLDG 7

Position Role Type:

Onsite

U.S. Citizen, U.S. Person, or Immigration Status Requirements:

Active and transferable U.S. government issued security clearance is required prior to start date.​ U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance​

Security Clearance Type:

DoD Clearance: Secret

Security Clearance Status:

Active and existing security clearance required on day 1

The Information Systems Security Manager (ISSM) is responsible for the end-to-end execution and oversight of cybersecurity activities in compliance with applicable U.S. Department of Defense (DoD) laws, regulations, and contractual requirements. The ISSM  executes  system authorization, continuous monitoring, inspection readiness, and risk management activities, and maintaining responsibility for cybersecurity outcomes. Responsibilities include implementing and sustaining cybersecurity requirements defined by government frameworks and guidance, including the Risk Management Framework (RMF), Joint Special Access Program Implementation Guide (JSIG) for SAP systems, NIST publications, NISPOM, and the DCSA Assessment and Authorization Guide (DAAG), and associated assessment and authorization guidance

** This position is onsite in Westford, MA. **

What YOU will do:

• Own cybersecurity responsibilities for assigned information systems, ensuring security objectives are achieved and organizational risk is effectively managed.

• Assist with inspections, assessments, audits, and continuous monitoring, leading preparation, execution, and response activities to maintain authorization and inspection readiness.

• Execute and maintain system authorization using the Risk Management Framework (RMF) and applicable guidance, including the Joint Special Access Program Implementation Guide (JSIG) for Special Access Program systems and the DCSA Assessment and Authorization Guide (DAAG) for DoD collateral systems.

• Maintain awareness and working knowledge of DD Form 254s and contractual security requirements, ensuring cybersecurity controls, inspection scope, and authorization boundaries align with approved mission and program objectives.

• Maintain, and validate cybersecurity plans, authorization artifacts, and compliance documentation to support audit-ready operations.

• Identify, assess, and communicate cybersecurity risk to the Sr. ISSM , including the impact of system changes, vulnerabilities, inspection findings, and authorization conditions.

• Manage and execute continuous monitoring activities, including evaluation of security posture, validation of control effectiveness, and tracking of security-relevant data.

• Manage, and drive closure of Plans of Action and Milestones (POA&Ms) resulting from inspections, assessments, and continuous monitoring activities.

• Assist in managing   and oversee cybersecurity Change Control Boards (CCBs), evaluating proposed system changes for security impact, authorization implications, and alignment with RMF requirements.

• Execute or coordinate corrective and protective security actions resulting from inspections, continuous monitoring, or identified cybersecurity incidents.

• Collaborate with cross-functional teams, including Information Technology, Facilities, and Industrial Security, to ensure cybersecurity requirements are integrated into technical, physical, and operational environments.

• Mentor ISSOs to ensure consistent execution of RMF activities, inspection readiness, and quality of authorization artifacts, while remaining accountable for cybersecurity outcomes.

• Prepare and deliver cybersecurity status reporting to the Sr. ISSM summarizing authorization posture, inspection readiness, risk trends, POA&Ms, and significant cybersecurity issues.

Qualifications YOU Must Have:

• Typically requires a University Degree and minimum 8 years prior relevant experience or an Advanced Degree in a related field and minimum 5 years of experience.

• U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance.

• Active DOD Secret Security Clearance day one.

• IAM Level III certification compliant with DoD 8570 / DoD 8140 (e.g., CISSP, CISM, GSLC).

• Experience performing ISSM responsibilities for classified or controlled information systems.

• Advanced knowledge of RMF and DoD system authorization processes.

• Experience executing authorization and continuou