Overview

The Information System Security Manager (ISSM) is responsible for applying and documenting Information System (IS) security principles, practices, and procedures under the Risk Management Framework (RMF) to maintain compliance with applicable security regulations such as NIST, CNSSI, and NISPOM as well as governing the development and management of classified information systems. This position requires the ISSM to be a strong advocate for integrating security into front-end requirements and overseeing the implementation and sustainment of security controls in all stages of the program lifecycle. This is not a hybrid or work from home position. It is a full-time onsite position at the office in Des Plaines, IL.Responsibilities:Achieve and maintain Authorization to Operate for classified information systemsManages Risk Management Framework (RMF) processLeads and supports security assessments and auditsPerform tasks to meet continuous monitoring requirements such as audit log reviews, security patching, and hardware/software configurationLead the organization's CMMC compliance program, ensuring alignment and adherence to DoD cybersecurity standards (NIST SP 800-171, etc.)Develop, document, and guide the implementation of practical, actionable information security policies, procedures, and controls aligned with CMMC and NIST standards (SSP, POAM, etc.)Continuously assess, refine, and manage the implementation of security controls across the enterprise architecture, using security metrics to drive improvementsProvide clear technical guidance to the IT team on the implementation and operation of security measuresEvaluate and recommend emerging cybersecurity technologies and best practices relevant to our environmentSupport the Facility Security Officer in other security disciplines such as COMSEC, physical security, document control, Insider Threat, OPSEC, and visit requestsPerform other duties as assignedMinimum Educational Qualifications & Requirements:Bachelor's degree in an applicable field and at least five years of relevant experiencePreferred Security+ (or equivalent) certifiedAbility to perform risk assessment and risk management for classified information systemsAbility to obtain Security Clearance, for which the United States Government requires United States citizenshiStrong written and verbal communication skillsAbility to maintain organized and complete recordsAbility to prioritize competing demands and complete tasks on scheduleMinimum Previous Experience:5+ years of progressive experience in information securityExpertise in RMF and ATO processesPrevious experience with classified information system security management and administrationProven ability to translate CMMC/NIST SP 800-171 requirements into documented, implementable proceduresExperience maturing a cybersecurity program, including developing processes and documentationStrong background in defense contracts and classified information handling procedures.Experience implementing and assessing systems using DISA STIGs for Windows and Linux operating systemExperience in implementing and monitoring technical, administrative, and operational security controlsOther Preferred Skills:3+ years of experience in assessing and documenting test or analysis data to show cybersecurity compliance to auditorsExperience with Microsoft Intune, Azure, Active Directory, Group Policy, and System AdministrationExperience with submitting and managing accreditation packages to Enterprise Mission Assurance Support Service (eMASS)Use of automated vulnerability and compliance scanning tools such as Security Content Automation Protocol (SCAP), Compliance Checker (SCC), Security Technical Implementation Guides (STIGs), and NessusExperience with SIPRNet installation, deployment, and managementWe recognize that attracting the best talent is key to our strategy and success as a company. As a result, we aim for flexibility in structuring competitive compensation offers to ensure we are able to