Information Systems Security Manager

<div class="content-intro"><h3>About Us</h3> <div> <div>AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future.</div> </div></div><p>AGE Solutions is seeking an experienced <strong>Information System Security Manager (ISSM)</strong> to support a program with our DoD customer.  The ISSM will provide cybersecurity leadership and oversight for assigned information systems, applications, networks, and mission environments. This role is responsible for supporting Risk Management Framework (RMF) implementation, system authorization activities, continuous monitoring, and compliance with Department of Defense (DoD) cybersecurity requirements.</p> <p>The successful candidate will work closely with Government stakeholders, system owners, engineers, assessors, and Information System Security Officers (ISSOs) to evaluate cybersecurity risks, maintain authorization readiness, and support secure adoption of emerging technologies.</p> <p><strong>Responsibilities Include: </strong></p> <ul> <li>Lead cybersecurity governance and risk management activities for assigned information systems, applications, networks, and mission environments.</li> <li>Oversee RMF implementation, system authorization activities, and ongoing cybersecurity compliance.</li> <li>Manage the development, maintenance, and review of authorization documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and supporting artifacts.</li> <li>Provide oversight of continuous monitoring (ConMon), vulnerability management, remediation activities, and security control assessments.</li> <li>Evaluate cybersecurity risks and recommend mitigation strategies, compensating controls, and corrective actions.</li> <li>Coordinate with ISSOs, system owners, engineers, assessors, Authorizing Officials, and Government stakeholders to support authorization and risk acceptance decisions.</li> <li>Ensure alignment with DoDI 8510.01, applicable NIST guidance, DISA Security Technical Implementation Guides (STIGs), and customer-directed cybersecurity requirements.</li> <li>Support cybersecurity inspections, audits, assessments, and authorization readiness reviews.</li> <li>Develop cybersecurity metrics, risk assessments, executive-level reports, and briefings.</li> <li>Provide technical guidance, mentorship, and oversight to ISSOs and supporting cybersecurity personnel.</li> <li>Assess security implications associated with emerging technologies, including artificial intelligence (AI), autonomous systems, cloud environments, and experimental capabilities.</li> <li>Recommend risk mitigations, compensating controls, and security safeguards for prototypes, pilot programs, and test environments that may not align with traditional authorization approaches.</li> <li>Develop and maintain authorization packages and supporting security documentation for emerging technologies, prototypes, and pilot initiatives.</li> </ul> <p><strong>Required Skills, Qualifications, and Experience: </strong></p> <ul> <li><strong>Citizenship and Clearance: </strong> <ul> <li>U.S. Citizenship is required.</li> <li>Must have and maintain a minimum of an active DoD Secret security clearance with the ability to obtain a DoD Top Secret clearance. A current Top Secret clearance is preferred.</li> </ul> </li> <li><strong>Education and Certifications:</strong> <ul> <li>Bachelor’s degree is required.</li> <li>Must meet applicable qualification requirements and possess at least one current certification recognized for DoD 8140 Work Role 722 – Information Systems Security Manager (ISSM), Intermediate level, such as: <ul> <li>CISSP</li> <li>CISM</li> <li>CGRC/CAP</li> <li>SecurityX/CASP+</li> <li>Security+</li> <li>CCSP</li> <li>GSEC</li> </ul> </li> </ul> </li> <li><strong>Experience: </strong> <ul> <li>5–10 years of relevant experience in cybersecurity, information assurance, RMF, risk management, or security compliance.</li> <li>Experience supporting RMF implementation, system authorization activities, and cybersecurity governance.</li> <li>Experience developing, reviewing, or managing authorization packages and supporting security documentation.</li> </ul> </li> <li><strong>Skills and Knowledge: </strong> <ul> <li>Strong understanding of cybersecurity risk assessment, vulnerability management, security controls, and remediation processes.</li> <li>Knowledge of DoDI 8510.01, NIST SP 800-53, NIST SP 800-37, applicable CNSSI requirements, and DISA STIGs.</li> <li>Strong analytical, leadership, communication, and technical documentation skills.</li> <li>Ability to coordinate with technical teams, Government stakeholders, and cybersecurity leadership.</li> <li>Ability to manage multiple priorities in a dynamic mission environment.</li> <li>Ability to obtain and maintain required customer-specific access and credentials.</li> </ul> </li> <li><strong>Location: </strong> <ul> <li>Candidates must resi