Information Systems Security Manager ISSM

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full-Time Regular Alexandria, VA, US

Salary Range: $ To $ Annually

KMS Solutions, LLC is a technical management / solutions company that specializes in engineering, analysis, and cyber security. Founded in 2005, KMS is a certified small business with nearly two decades of experience supporting the Department of Defense as well as many other departments and programs critical to our Nation’s security and well-being.

KMS is a three-time winner of the USA Today Top Workplaces recognizing quality workplace cultures across the United States who put their employees first. Additionally, KMS has won multiple regional Top Workplaces awards and Culture Excellence Awards for Compensation & Benefits, Innovation, Leadership, Purpose & Values and Work-Life Flexibility.

KMS solutions, LLC is seeking a highly motivated individual for an Information Systems Security Manager (ISSM) position providing senior-level cybersecurity leadership, oversight, and Risk Management Framework (RMF) support to the Naval Special Warfare (NSW) and expeditionary systems managed by PMS 340. PMS 340’s mission encompasses manned and unmanned undersea systems, surface systems, air operations, visual augmentation systems, small arms, diving systems, and Special Operations Forces (SOF) maritime capabilities.

The ISSM will serve as the cybersecurity authority for PMS 340, responsible for system accreditation, cybersecurity engineering, vulnerability management, and ensuring compliance with DoD, DoN, NAVSEA, NIST, and CNSSI cybersecurity requirements.

Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions.

• Lead development, maintenance, and submission of RMF accreditation packages for PMS 340 systems, ensuring compliance with DoD, DoN, NAVSEA CS‑DoN SOPs, and business rules.
• Oversee cybersecurity documentation including SSPs, POA&Ms, validation procedures, and risk assessments, ensuring systems meet information assurance and security requirements.
• Conduct and oversee security control assessments in accordance with NIST SP 800‑53, 800‑53A, CNSSI 1253, and RMF requirements.
• Perform and direct vulnerability assessment and compliance reviews using ACAS, SCAP, and Nmap for PMS 340 systems.
• Manage cybersecurity workflows and accreditation artifacts using eMASS.
• Support cybersecurity Test & Evaluation phases including cooperative vulnerability identification, adversarial testing, penetration assessments, and adversarial assessments.
• Identify and mitigate cybersecurity risks across PMS 340 systems; ensure risk treatment, compliance, and monitoring throughout the system lifecycle.
• Coordinate cybersecurity activities across NAVSEA, NSW, SOCOM, NUWC, and other stakeholders, supporting IPTs, Working Groups, and program reviews.
• Prepare cybersecurity reports, briefs, and documentation, clearly articulating cybersecurity requirements to PMO leadership and technical teams.
• Provide cybersecurity guidance, engineering support, and subject matter expertise for PMS 340 systems, including undersea, maritime, surface, air, and expeditionary technologies.
• Support PMS 340 leadership in ad hoc cybersecurity meetings and engagements, including those requiring travel.

• Bachelor’s degree in cybersecurity, information systems, engineering, mathematics, or related discipline.
• Minimum 5 years of cybersecurity or RMF-based experience supporting DoD systems.
• DoD 8570.01M IAT/IAM Level II or III…