Information Systems Security Manager (Cybersecurity)

TL;DR

Information Systems Security Manager (Cybersecurity): Leading the enterprise implementation of the NIST Risk Management Framework (RMF) for National Institutes of Health (NIH) information systems with an accent on Assessment & Authorization (A&A) lifecycles and FISMA compliance. Focus on directing security documentation, managing cybersecurity risk assessments, and supervising ISSOs to ensure ongoing security authorization.

Location: Remote (Must be based in the US and possess or be able to obtain Public Trust clearance)

Company

hirify.global provides specialized technical and professional services supporting federal government programs, including the NIH.

What you will do

• Lead enterprise NIST RMF implementation across NIH/OD information systems.
• Manage the full Assessment & Authorization (A&A) lifecycle for Low and Moderate FISMA systems.
• Direct the development of SSPs, SAPs, SARs, POA&Ms, and authorization packages.
• Oversee continuous monitoring activities and manage enterprise cybersecurity risk assessments.
• Supervise and mentor Information System Security Officers (ISSOs).
• Coordinate with SCAs, Authorizing Officials, and executive leadership regarding security requirements.

Requirements

• Public Trust Clearance (current or ability to obtain).
• B.S. in Computer Science, Information Technology, or a related field.
• 7+ years of experience supporting Federal cybersecurity programs.
• 5+ years in a leadership role such as ISSM, Senior ISSO, or Security Manager.
• Proven experience managing federal systems through the RMF lifecycle and supporting FISMA systems.
• Active certification in CISSP, CISM, CAP, GSLC, or Security+.