Information System Security Manager (ISSM)

The Information System Security Manager (ISSM) is responsible for overseeing the cybersecurity posture of systems and ensuring compliance with the Risk Management Framework (RMF). This role frequently collaborates with the Government Information System Security Officer (ISSO) to develop, maintain, and submit RMF artifacts and documentation. The ISSM will apply cyber hardening practices and lead continuous monitoring activities to ensure the system obtains and maintains an Authority to Operate (ATO).

**Responsibilities**

+ Serve as the primary cybersecurity lead, ensuring system accreditation and ongoing ATO sustainment.
+ Develop, update, and maintain RMF documentation (including SSPs, POA&Ms, SARs, and other artifacts).
+ Perform security assessments, risk analysis, and vulnerability mitigation activities.
+ Implement cyber hardening requirements and continuously assess security controls for effectiveness.
+ Coordinate with internal and external stakeho...