# Information Systems Security Manager (ISSM) I

**Company**: GDIT
**Location**: Bedford, MA
**Work arrangement**: onsite
**Experience**: senior
**Job type**: full-time
**Salary**: $109,735 - $148,465
**Category**: Security
**Industry**: Technology

**Apply**: https://gdit.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/USA-MA-Bedford---Customer-Proprietary-MAC017/Information-Systems-Security-Manager--ISSM--I_RQ228596?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_9ec0e11d-ca8

## Description

The Information Systems Security Manager (ISSM) I will serve as a principal advisor on all matters, technical and otherwise, involving the security of information systems under their purview. The position will provide 'day-to-day' support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities.

The ISSM's primary responsibilities include:

- Performing oversight of the development, implementation and evaluation of information system security program policy;

- Developing and overseeing operational information systems security implementation policy and guidelines;

- Advising customers on Risk Management Framework (RMF) assessment and authorization issues;

- Performing risk assessments and making recommendations to DoD agency customers;

- Evaluating authorization documentation and providing written recommendations for authorization;

- Developing and maintaining a formal Information Systems Security Program;

- Ensuring that all IAOs, network administrators, and other cyber security personnel receive necessary technical and security training;

- Developing and executing security assessment plans;

- Maintaining and/or applicable repository for all system authorization documentation and modifications;

- Instituting and implementing a Configuration Control Board (CCB) charter;

- Developing policies and procedures for responding to security incidents;

- Ensuring proper protection or corrective measures have been taken when an incident or vulnerability has been discovered;

- Evaluating threats and vulnerabilities to ascertain whether additional safeguards are needed;

- Assessing changes in the system, its environment, and operational needs that could affect the authorization;

- Ensuring that authorization is accomplished and a valid Authorization determination has been given for all authorization boundaries;

- Conducting periodic assessments of the security posture of the authorization boundaries;

- Ensuring configuration management (CM) for security-relevant changes to software, hardware, and firmware;

- Ensuring periodic testing is conducted to evaluate the security posture of IS;

- Ensuring that system recovery and reconstitution processes are developed and monitored;

- Ensuring all authorization documentation is current and accessible;

- Ensuring that system security requirements are addressed during all phases of the system life cycle;

- Participating in self-inspections and conducting the duties of the Information System Security Officer (ISSO) if one is not present.

The likely salary range for this position is $109,735 - $148,465.

## Skills

### Required
- Cybersecurity
- Information Security
- Information System Security
- Security Evaluations

### Nice to have
- SAP experience

---

Source: [Apply at gdit.wd5.myworkdayjobs.com](https://gdit.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/USA-MA-Bedford---Customer-Proprietary-MAC017/Information-Systems-Security-Manager--ISSM--I_RQ228596?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)