Information Systems Security Manager; ISSM

Information Systems Security Manager (ISSM)

K ’s National Security Solutions team is seeking an Information Systems Security Manager (ISSM) to join a small, highly selected systems security engineering team supporting the U.S. Space Force and Space Systems Command (SSC), Spectrum Warfare (SYD 89/SZW) Senior Program Director (SPD) in El Segundo, CA. The position is onsite and co‑located with the Government Customer, working closely with Systems Engineering & Integration (SE&I) professionals.

• Maintain and enforce all cybersecurity policies, standards, and directives to ensure assessment and authorization of information systems processing classified information.
• Participate in IT architecture design reviews to assess and ensure compliance with cybersecurity requirements.
• Ensure cybersecurity principles are embedded in systems engineering efforts for ground and space systems in multiple classified computing domains.
• Integrate the Risk Management Framework throughout the system acquisition lifecycle.
• Create, review, and assess RMF related artifacts for acceptable implementation of cybersecurity principles.
• Develop, coordinate, and implement cybersecurity strategies.
• Evaluate and apply government cybersecurity (DoD, NIST, FIPS, and CNSS) policies and instructions as necessary.
• Conduct program and technical risk assessments to determine necessary cybersecurity protection measures.
• Monitor the evolving state of industry knowledge and application to information security best practices.
• Interface with other government organizations during security evaluation of engineering design solutions.
• Provide technical security evaluation support to the Security Control Assessor (SCA) during contractor assessment and authorization activities.
• Evaluate the continued effectiveness of implemented protection measures within the authorization boundary.
• Prepare, review, and present technical reports and briefings.
• Provide mentoring and technical leadership to the cybersecurity program team.

• Bachelor’s degree in Cybersecurity, Engineering, or a related scientific or technical discipline.
• 3 years of work experience in Cybersecurity may be considered in lieu of a Bachelor’s degree.
• 10+ years of work experience in Information Assurance/Cybersecurity.
• Experience as an ISSO, ISSE, or ISSM for a complex system.
• Certified Information Systems Security Professional (CISSP) Certification or equivalent.
• Ability to translate cybersecurity related policies and guidance into system requirements.
• Experience with cybersecurity assessment and authorization processes such as the Risk Management Framework.
• Understanding of common vulnerabilities and associated risk mitigation strategies.
• Experience with cybersecurity policy and processes, architectures, testing and evaluation procedures, including Zero Trust.
• Ability to articulate complicated security concepts in cross‑functional planning, coordination and task execution across the spectrum of systems engineering and integration activities.
• Capability to work independently with minimal oversight, prioritizing complex issues, advocating for resources, and escalating to management as necessary.
• Effective interpersonal and team‑building skills to engage at both the engineering and management levels to build confidence and collaboration between team members.
• Strong written and verbal communications skills.
• Experience with COMSEC key management and familiarity with cryptographic equipment lifecycle management concepts.
• Ability to work in a secure, confined location (i.e., SCIF).
• Must have an active TS/SCI clearance to be considered for this position.

• DoD 8570.01‑M IAT Level III approved cybersecurity baseline certification.
• Master’s degree in Cybersecurity, Engineering, or a related scientific or technical discipline.
• Computing Technology Industry Association Security+ Certification.
• Understanding and experience in the acquisition life cycle for information systems.
• Experience in security control evaluation, testing and assessment in complex system environments.
• Familiarity with security tools for implementing and assessing security compliance (e.g., SCAP,…