Information System Security Manager; ISSM

Description

MBL Technologies, Inc. offers a diverse set of management and technology consulting services to Federal government and commercial markets. Our solutions are tailored to support each client’s mission, accounting for their unique needs and operating environments to ensure success. We bring the right people, capabilities, and expertise together to assist our clients with enabling their mission. Together our individual differences drive successful business results.

If you are transitioning from military to civilian life, have prior service, are a retired veteran, or a member of the National Guard or Reserves, or spouse of an active military service member, we encourage you to apply. Please visit our webpage for information on our policies and benefits for the military and veteran community.

• Make an Impact: Work on meaningful projects that support critical missions and drive innovation.
• Invest in Your Future: Competitive benefits, 401(k) match, and professional development opportunities.
• Be Part of Something Bigger: Join a collaborative team that values community engagement, volunteerism, and employee connection.

MBL Technologies is seeking an experienced Information System Security Manager (ISSM) to provide cybersecurity leadership and oversight for assigned information systems, programs, or enclaves. The ISSM will lead Risk Management Framework (RMF) activities, support system authorization efforts, manage cybersecurity risk and vulnerability remediation, and oversee Information System Security Officers (ISSOs) and other security support personnel.

This position serves as a primary cybersecurity lead, working closely with program leadership, system owners, engineers, assessors, and Authorizing Officials to ensure systems remain secure, compliant, and operationally ready.

Work Location: Onsite 3–5 days per week / Crystal City, MD

Security Clearance: Active Secret Security Clearance Required

• Lead and oversee RMF implementation and execution across assigned information systems, programs, or enclaves.
• Direct and support Authority to Operate (ATO) activities, ensuring required security documentation is complete, accurate, current, and audit ready.
• Manage, coach, and provide technical guidance to ISSOs and other cybersecurity personnel.
• Oversee vulnerability management, cybersecurity risk assessments, POA&M tracking, and remediation prioritization.
• Develop, implement, and enforce cybersecurity policies, procedures, controls, and training requirements.
• Coordinate with Authorizing Officials, system owners, CISO personnel, engineers, assessors, and program leadership to evaluate and communicate system security and risk posture.
• Ensure compliance with applicable federal and DoD cybersecurity requirements, including NIST RMF, NIST SP 800-53, and related DoD cybersecurity guidance.
• Provide cybersecurity governance and oversight throughout the system authorization lifecycle.
• Support continuous monitoring activities and ensure identified security weaknesses and vulnerabilities are appropriately documented, tracked, and remediated.
• Communicate cybersecurity risks, compliance status, and recommendations to program and senior leadership.

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field preferred.
• Relevant DoD 8140-aligned cybersecurity certification, such as CISSP or another certification appropriate to the position.
• 8+ years of cybersecurity, information assurance, or information systems security experience.
• Experience providing cybersecurity leadership, security oversight, or team coordination.
• Strong knowledge of NIST SP 800-53, RMF processes, ATO lifecycle activities, and DoD cybersecurity requirements.
• Demonstrated experience leading cybersecurity governance, compliance, and risk management activities.
• Experience supervising ISSOs or coordinating security activities across multiple technical teams.
• Experience with vulnerability management, security assessments, POA&M governance, remediation, and security documentation.
• Familiarity with vulnerability scanning tools, DISA STIG…