Information Systems Security Manager

Akumen, Inc. provides mission-focused technology, cybersecurity, engineering, and professional services supporting federal government customers. We are seeking an experienced Information Systems Security Manager (ISSM) to provide cybersecurity leadership, Risk Management Framework expertise, and oversight of Assessment and Authorization activities across multiple federal information systems.

The Information Systems Security Manager will serve as a senior cybersecurity subject matter expert responsible for leading security authorization, governance, risk, compliance, and continuous monitoring activities across assigned systems.

Key Responsibilities

• Serve as the senior onsite ISSM and cybersecurity subject matter expert supporting authorization, risk management, and compliance activities across multiple federal systems.
• Lead all phases of the Risk Management Framework (RMF) lifecycle, including system categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
• Analyze and define system security requirements, including requirements associated with multilevel security (MLS), information protection, system architecture, and mission needs.
• Design, develop, engineer, and recommend cybersecurity solutions that address system security, MLS, risk, compliance, and mission requirements.
• Serve as a primary subject matter expert for eMASS, ensuring accurate management of authorization packages, security controls, inheritance relationships, POA&Ms, assessments, and supporting artifacts.
• Support configuration, optimization, and automation of governance, risk, and compliance processes and technologies.
• Maintain cybersecurity accreditation and authorization documentation throughout the system development lifecycle.

Minimum Required Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, Information Systems, Computer Science, or a related discipline with 7–10 years of relevant cybersecurity experience, including at least seven years supporting federal systems.
• Minimum of seven years of experience executing RMF and Assessment & Authorization (A&A) activities within DoW, DoS, DoD, or comparable federal environments.
• Demonstrated experience serving as an ISSM, senior ISSO, ISSE, Security Control Assessor, Validator, or equivalent senior cybersecurity professional with extensive knowledge of NIST security controls, eMASS, POA&Ms, ACAS, and DISA STIG requirements.
• Demonstrated ability to lead cybersecurity compliance efforts, perform risk assessments, develop authorization documentation, and communicate technical and risk information to government and executive stakeholders.Preferred Qualifications
• CISSP, CISM, CASP+, GSLC, or equivalent senior-level cybersecurity certification.

Minimum Required Qualifications

• Master's degree in Cybersecurity, Information Assurance, Information Systems, or a related discipline.
• Extensive hands-on experience with eMASS and RegScale or comparable GRC platforms.
• Experience with ServiceNow GRC or similar governance, risk, and compliance technologies.
• Experience integrating GRC platforms with vulnerability management, workflow, ticketing, and reporting systems.
• Experience supporting AWS or other cloud-based federal environments.
• Experience with multilevel security (MLS), cross-domain security requirements, and complex federal system architectures.

Clearance

• A minimum of an active Secret security clearance is required.