Information System Security Manager (Issm)

• Serve as the primary ISSM and cybersecurity authority for systems within a secure, multinational DoW environment.
• Develop, implement, and maintain the organization's information system security program and policies.
• Own and manage the RMF lifecycle, including categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
• Lead the development, submission, and maintenance of ATO packages and supporting authorization artifacts.
• Provide direction, oversight, and mentorship to ISSOs and supporting cybersecurity personnel.
• Maintain and track POA&Ms, ensuring timely remediation of findings and risks.
• Oversee security assessments, audits, and compliance activities, including STIG and IAVM compliance.
• Coordinate incident response, reporting, and risk decisions with leadership and mission partners.
• Review and approve system security documentation, including SSPs, risk assessments, and control implementation statements.
• Advise leadership and customers on cyber risk posture, mitigations, and authorization status.
• Ensure continuous monitoring data, vulnerability findings, and endpoint security posture are evaluated and acted upon.
• Other duties, as assigned.

• U.S. Citizen.
• Active Secret security clearance with the ability to obtain TS/SCI (TS/SCI preferred).
• Active DoD 8140 IAM Level II or higher certification (e.g., CAP, CASP+, CISM, CISSP).
• 8+ years of overall IT experience, including at least 5 years of progressive hands-on experience in cybersecurity, RMF, and information assurance, with demonstrated experience in an ISSM or equivalent leadership role.
• Ability to work full-time, onsite in Ft. Meade, MD, 5 business days per week.
• In-depth knowledge of the Risk Management Framework (RMF) and the DoD authorization (A&A) process.
• Demonstrated experience developing and managing ATO packages, SSPs, POA&Ms, and continuous monitoring programs.
• Experience overseeing security assessments, STIG compliance, and IAVM remediation across enterprise systems.
• Familiarity with vulnerability management (ACAS/Tenable) and endpoint security (Trellix ESS) operations and how they inform risk decisions.
• Familiarity with SIEM platforms such as Microsoft Sentinel.
• Strong leadership, decision-making, problem-solving, and stakeholder communication skills, including the ability to brief senior-level executives and customers.

• Bachelor's degree in Computer Science, Information Security, or another STEM discipline.
• Active Top Secret clearance with the ability to obtain SCI.
• Experience supporting systems in a DISA-administered DoW environment.
• Experience with Azure environments and cloud authorization (e.g., FedRAMP/DoD CC SRG).
• Experience leading A&A efforts for IL5/IL6 systems.
• Prior experience managing teams of ISSOs and cybersecurity engineers.

• Competitive salary commensurate with experience and clearance.
• Comprehensive medical, dental, and vision coverage.
• Paid time off and federal holidays.
• 401(k) retirement plan.
• Professional development and certification support.
• Mission-driven work in a classified, high-impact DoW environment.
• Full benefits package details provided during the offer process.

ZTI Solutions, LLC was founded in 1997 in Virginia and is classified as a small business. The company is owned and operated by its founder, Rudy Zadnik, who emphasizes moral and business excellence over increasing company profits. This results in a more customer-oriented attitude towards mission accomplishment, as opposed to growing profits or sales.Our approach to consulting and engineering centers around using only highly skilled personnel who are seasoned industry veterans. All employees hold high-level industry and vendor certifications. We offer a comprehensive set of consulting and staff augmentation services, primarily focused on networking and security consulting in the classified space.