Information System Security Manager ( ISSM )

Description

Information System Security Manager (ISSM) 

We are seeking an experienced Information System Security Manager (ISSM) to lead cybersecurity oversight for assigned systems, programs, or enclaves. The ISSM is responsible for directing Risk Management Framework (RMF) execution, supporting authorization activities, managing vulnerability and risk posture, enforcing security policy implementation, and overseeing the performance of ISSOs and related security support personnel. This role serves as the primary security lead interfacing with leadership, system owners, assessors, engineers, and Authorizing Officials to confirm systems remain secure, compliant, and operationally ready.

Location: Onsite 3-5 days a week

Key Responsibilities

• Lead and oversee RMF execution across assigned systems, programs, or enclaves •Direct Authority to Operate (ATO) activities and ensure required documentation is complete, current, and audit-ready 
• Manage, coach, and mentor ISSOs and other security support staff 
• Oversee vulnerability management, risk assessments, POA&M tracking, and remediation prioritization •Develop, implement, and enforce security policies, procedures, and training requirements 
• Coordinate with Authorizing Officials, system owners, CISO staff, engineers, and program leadership to assess and communicate system risk posture 
• Ensure compliance with security frameworks and federal requirements, (e.g., NIST RMF, NIST SP 800-53, related DoD cybersecurity guidance)

Requirements

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field preferred •5+ years of cybersecurity or information assurance experience 
• Prior team leadership or security oversight experience preferred. 
• Active Secret clearance •Relevant DoD 8140 certifications such as CISSP strongly preferred 
• Strong knowledge of NIST SP 800-53, RMF processes, and ATO lifecycle activities 
• Experience leading security governance, compliance, and risk management efforts 
• Experience supervising ISSOs or coordinating security activities across multiple technical teams 
• Strong communication skills for executive updates, audit support, and risk briefings 
• Familiarity with vulnerability scanning tools, STIG validation, POA&M governance, and security documentation workflows 

Preferred Qualifications

• Ability to operate in fast-paced, compliance-driven environments 
• Strong judgment in evaluating cyber risk and balancing mission needs 
• Proven ability to build trust with technical teams and senior leadership 
• Detail-oriented approach to documentation, authorization, and continuous monitoring requirements

Venesco, LLC, is an equal opportunity and affirmative action employer. Venesco is committed to administering all employment and personnel actions on the basis of merit and free of discrimination based on race, ethnicity, religious affiliation, gender, gender identity or expression, sexual orientation, national origin, protected veteran status, or status as an individual with a disability. Consistent with this commitment, we are dedicated to the employment and advancement of qualified minorities, women, individuals with disabilities, protected veterans, persons of all ethnic backgrounds and religions according to their abilities.

For more information on Venesco, LLC., visit https://venesco.com.