Information System Security Manager (ISSM)
LMI Consulting · Washington, DC, DC, US
About this role
## Overview LMI is a digital solutions provider focused on accelerating government impact through innovation and speed—delivering commercial-grade platforms and mission-ready AI to federal agencies. LMI is seeking an **Information System Security Manager (ISSM)** to support the **Lead Cybersecurity Integrator** with **security authorization, governance, and continuous monitoring** for enterprise IT capabilities across new and existing secure facilities. ## Responsibilities - Lead **Risk Management Framework (RMF)** implementation across the system lifecycle (categorization, control selection/tailoring, implementation, assessment, authorization, and continuous monitoring). - Develop **security authorization strategies and roadmaps** for **classified/unclassified** systems, **multi-enclave environments**, and **interconnected capabilities**. - Coordinate system security documentation and deliverables, including: - System Security Plans - Implementation evidence - Plans of Action & Milestones (POA&Ms) - Assessment packages - Authorization decisions - Continuous monitoring artifacts - Interpret and apply **NIST SP 800-37**, **NIST SP 800-53**, **CNSSI 1253**, and relevant defense/intelligence guidance, customer policies, and program requirements. - Advise leadership and technical teams on **cyber risk**, **control gaps**, **remediation priorities**, and **risk acceptance**. - Integrate security requirements into **architecture, engineering, acquisition, change management, testing, deployment, operations, and sustainment**. - Oversee **vulnerability, configuration, and compliance monitoring**; prioritize remediation based on exploitability, mission impact, exposure, and operational consequence. - Coordinate assessors, authorizing officials, security officers, engineers, operators, and stakeholders through reviews, audits, incidents, and authorization milestones. - Automate evidence collection and control validation/reporting while preserving **auditability** and **human oversight**. ## Foundational Skills / Knowledge - RMF and security authorization lifecycle principles - **NIST SP 800-37**, **NIST SP 800-53**, **CNSSI 1253**, and federal/defense/intelligence security-control frameworks - System Security Plans, control traceability, evidence, assessments, POA&Ms, authorization packages, and monitoring deliverables - Risk assessment, control tailoring, compensating controls, residual risk, and risk acceptance - Continuous monitoring, vulnerability management, secure configuration/patching, and compliance assessment - Fundamentals across systems, networking, cloud, identity, applications, data, and operational security - Zero trust, least privilege, defense-in-depth, segmentation, and secure boundary principles - Configuration/change/incident/problem/technology lifecycle management - Security automation, metrics, technical writing, briefings, and stakeholder coordination ## Location & Travel - **Washington, DC metro area** - Travel: approximately **25–50%** to support activities across multiple program locations - Immediate availability strongly preferred (unclassified planning may begin while access nominations are processed) ## Qualifications ### Required - **Bachelor’s degree** in Cybersecurity, Computer Science, Information Technology, Engineering, or related field - **8+ years** of cybersecurity, information assurance, security authorization, or RMF experience (including **classified environments**) - Experience leading s
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.