Cybersecurity Systems Engineer / ISSM

The Cybersecurity Systems Engineer / Information Systems Security Manager (ISSM) provides leadership for the organization's information security, governance, risk, and compliance program.

The role is responsible for protecting the confidentiality, integrity, and availability of corporate and customer information systems while aligning cybersecurity practices with business objectives, contractual obligations, and regulatory requirements.

This position serves as the organization's primary cybersecurity advisor and works collaboratively with Information Technology, Program Management, Contracts, Human Resources, and Executive Leadership to maintain compliance with applicable cybersecurity frameworks and contractual obligations.

This is a hands-on leadership role that combines information systems security management with responsibility for the secure administration, engineering, configuration, and maintenance of the organization’s corporate and classified information technology environments.

• Develop, implement, and continuously improve the corporate Information Security Program, serving as the primary ISSM and security lead for corporate, customer, classified, air-gapped, and standalone information systems.
• Lead cybersecurity compliance activities associated with applicable regulations, contracts, and frameworks, including NIST SP 800-171, NIST SP 800-53, CMMC, CMMI, DFARS, FAR, ISO 27001, DCSA, RMF, ATO, and customer-specific requirements.
• Design, implement, document, and oversee the secure operation and lifecycle management of corporate, cloud, classified, air-gapped, and standalone systems, ensuring appropriate security controls are implemented and maintained.
• Develop and maintain SSPs, POA&Ms, authorization packages, policies, standards, procedures, system and network diagrams, inventories, configuration records, and documentation supporting account management, media control, auditing, incident response, and continuous monitoring.
• Lead internal and external security assessments, ISO audits, CMMC readiness activities, DCSA reviews, self-inspections, vulnerability assessments, control validation, and remediation of identified findings.
• Conduct risk assessments, oversee vulnerability management and remediation tracking, monitor emerging threats and regulatory changes, and provide executive-level reporting on cybersecurity posture, compliance, vulnerabilities, and risk.