About this opportunity
CATHEXIS lists this Information System Security Manager (req-294) opportunity in tysons, Virginia. Review the employer’s description below for duties, qualifications and application requirements.
Job description
Team CATHEXIS elevates the government contracting experience through rapid response, deep skill, and thoughtful problem-solving and communication. Our core capabilities are our top-tier program and project management, data analytics, and audit services, the backbone of which is our integrated approach to operational excellence.
You worked hard to get to where you are. You strive to make every day better than the day before. So do we. Team CATHEXIS operates with an all-in mindset. We are working together to create a company that supports our shared values and individual goals. Our values are centered around leading with integrity, owning the outcome, growing together, and moving with purpose in everything we do for our employees, customers, partners, and communities. We believe success is best when we listen and lead with empathy; model high standards of ethics to provide a rewarding candidate experience; work hard, have fun, and appreciate the strengths we all bring to the team; and empower our employees to create innovative and trusted results.
We are looking for a dynamic Information System Security Manager to join our team! The Information System Security Manager (ISSM) serves as the principal advisor to the Authorizing Official (AO) and program leadership on all matters, technical and otherwise, involving the security of assigned information systems. The ISSM is responsible for the development, implementation, and maintenance of the agency's information security program in accordance with the Risk Management Framework (RMF), NIST SP 800-series guidance, and applicable federal and agency-specific security policies. This role oversees a team of Information System Security Officers (ISSOs) and serves as the primary point of contact for security authorization, continuous monitoring, and incident response activities.
Responsibilities
Serve as the principal advisor to the Authorizing Official (AO) and Information System Owner on the security of assigned information systems
Lead and manage the Assessment and Authorization (A&A) process for information systems in accordance with the Risk Management Framework (RMF, NIST SP 800-37), ensuring timely issuance and maintenance of Authorizations to Operate (ATOs)
Develop, review, and maintain System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), Security Assessment Reports (SARs), and other required RMF artifacts
Oversee a team of Information System Security Officers (ISSOs), providing guidance on day-to-day security operations and compliance activities
Conduct and oversee continuous monitoring activities, including vulnerability scanning, configuration management, and security control assessments, to maintain the security posture of authorized systems
Ensure compliance with FISMA, NIST SP 800-53, NIST SP 800-171 (as applicable), CNSSI, and agency-specific cybersecurity policies and directives
Coordinate incident response activities and report security incidents to the appropriate agency SOC/CSIRC and leadership in accordance with established procedures
Manage risk assessments and communicate residual risk to the AO, providing recommendations for risk acceptance, mitigation, or remediation
Ensure personnel supporting assigned systems meet DoD -M / DoD 8140 information assurance workforce certification and training requirements
Maintain security documentation in agency GRC/eMASS (or equivalent) systems and support periodic audits, Inspector General (IG) reviews, and independent assessments
Support the development of security policies, procedures, and standard operating procedures (SOPs) to strengthen the agency's overall security program
Active Secret clearance or higher
Minimum 3 years of experience in information systems security, information assurance, or cybersecurity, with direct experience supporting a federal agency
Demonstrated experience serving as an ISSM, ISSO, or equivalent security role within the Risk Management Framework (RMF) or legacy DIACAP/C&A process
Working knowledge of NIST SP 800-37, NIST SP 800-53, NIST SP 800-30, and FISMA reporting requirements
Active DoD Secret security clearance required at time of hire; ability to maintain clearance eligibility for the duration of the contrac
Current DoD -M / DoD 8140 IAM Level II certification (e.g., CAP, CASP+ CE, CISM, GSLC) at time of hire
Strong written and verbal communication skills, with experience briefing technical risk and compliance matters to government leadership and Authorizing Officials
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent professional experience
Desired Skills
IAM Level III certification (e.g., CISSP, CISSP-ISSMP, CISM) or equivalent advanced credential
Experience using eMASS, Xacta, or other GRC platforms to manage A&A documentation
Experience supporting defense, healthcare, or civilian federal agency security programs
Familiarity with cloud security authorization processes (FedRAMP) and DevSecOps/continuous ATO practices
CATHEXIS offers competitive compensation packages to all eligible employees. Our goal is to provide a compensation package that reflects the value you bring to our team, is competitive with national average market rates, and promotes your financial security and personal well-being. The annual salary range for this role is $150,000.00 - $195,000.00 Please note that the salary information provided is a general guideline. CATHEXIS considers various factors in its final offer, including location, qualifications, experience, and skills.
Performance Bonuses
Medical Insurance
Dental Insurance
Vision Insurance
401(k) Plan (Traditional and ROTH)
Life Insurance (Basic, Voluntary & AD&D)
Paid Time Off
11 Federal Holidays
Parental Leave
Commuter Benefits
Short Term & Long Term Disability
Training & Development
Wellness Program
Community Outreach Initiatives
CATHEXIS is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated againston the basis ofdisability EEO IS THE LAW.If you are an individual with a disability and would like to request a reasonable accommodation as part of the employment selection process, please contact the Recruiting
#J-18808-Ljbffr
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.