Information Systems Security Manager

Qualifications: Master's or PHD in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering OR a Bachelor's with an Advanced security Certification. Serve as a principal technical advisor on cybersecurity, bringing subject-matter expertise to risk analysis, incident response, system remediation, and audit support efforts.

Overview:

VTG is seeking a Senior Information Systems Security Manager (ISSM) to support our national security customer in the WMV. The position is 100% onsite. 

Responsibilities:

• Lead, mentor, and supervise a team of contractor security professionals responsible for the end-to-end implementation of the RMF lifecycle for FBI IT systems.
• Oversee and coordinate activities within the Prepare step, ensuring roles, responsibilities, and risk management strategies are clearly defined and maintained.
• Guide system categorization efforts to ensure all information systems are appropriately classified based on mission/business impact and regulatory requirements.
• Advise on the selection, tailoring, and documentation of security controls aligned with system categorizations, Bureau risk appetite, and compliance requirements.
• Oversee the implementation of technical, operational, and management controls throughout system and application lifecycles, with a particular focus on quality and completeness of all deliverables.
• Ensure comprehensive security control assessments are planned, executed, and documented to validate the effectiveness of implemented safeguards.
• Prepare risk management documentation for system authorization and executive decision-making.
• Direct ongoing monitoring and continuous assessment activities, collecting metrics to adjust security strategies and ensure sustained compliance.
• Serve as a principal technical advisor on cybersecurity, bringing subject-matter expertise to risk analysis, incident response, system remediation, and audit support efforts.
• Foster a culture of security awareness, providing technical guidance and training to both team members and stakeholders.
• Track, report, and communicate status, risks, and improvement opportunities related to security engineering activities to leadership and stakeholders.
• Maintain up-to-date knowledge of RMF, NIST guidance, and industry best practices in support of continuous process improvement.

Qualifications:

• Master's or PHD in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering OR a Bachelor's with an Advanced security Certification
• Active Top Secret Clearance w/ SCI; with active CI Poly
• One of the following certifications: CISM; CISSP; CISSP-ISSMP; FITSP-M; GCIA; GCIH; GICSP; GSLC

*Position contingent upon contract award*