Information System Security Manager

Fish Eye Software is seeking an experienced Information System Security Manager (ISSM) to oversee the security and compliance of classified information systems and Controlled Unclassified Information (CUI) environments. This role combines cybersecurity compliance, hands‑on IT security administration, and security policy management to support DoD requirements, including the Risk Management Framework (RMF), NIST SP 800-53, NIST SP 800-171, and CMMC Level 2.

You will work closely with Fish Eye leadership, government agencies, partners, and internal IT and engineering teams to manage cybersecurity risks, maintain secure systems, and support security assessments and authorization activities.

This position requires U.S. Citizenship and an active Secret Security Clearance.

• Develop, implement, and maintain information system security policies, procedures, technical safeguards, and compliance processes for classified systems and CUI environments.
• Maintain System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), access records, and supporting security documentation and compliance evidence.
• Implement, monitor, and assess security controls in accordance with RMF, NIST SP 800-53, NIST SP 800-171, CMMC Level 2, and applicable DoD requirements.
• Coordinate with DCSA, Security Control Assessors (SCAs), and other stakeholders on security assessments, authorization activities, compliance reviews, and remediation.
• Advise leadership on cybersecurity risks, security priorities, and improvement initiatives.
• Administer and monitor Microsoft 365 environments, including GCC High, Entra , Exchange Online, Teams, and SharePoint. Review Conditional Access policies, multifactor authentication (MFA), privileged roles, and security configurations.
• Manage user onboarding and offboarding, account permissions, privileged access, and periodic access reviews.
• Oversee classified information handling, media control, labeling, malware scanning, secure data transfers, and configuration management.
• Work with IT teams to secure Windows, Active Directory, and Linux systems through system hardening, patch management, access controls, vulnerability management, and remediation.
• Coordinate security monitoring and incident response; investigate vulnerabilities and misconfigurations and track corrective actions.
• Oversee application security testing and coordinate remediation with developers.
• Coordinate cybersecurity awareness and user training covering phishing, acceptable use, and CUI protection.

• U.S. Citizenship and an active DoD Secret Clearance.
• Bachelor's degree and at least four years of relevant experience, or an equivalent combination of education, experience, and industry certifications (e.g., Security+, CISSP, CISM).
• Current CompTIA Security+ certification or higher for IAM Level I, with the ability to obtain IAM Level II qualification.
• Knowledge of RMF, NIST SP 800-53, NIST SP 800-171, CMMC Level 2, and applicable DoD cybersecurity requirements.
• Experience supporting classified systems, DCSA reviews, security assessments, or system authorization processes.
• Experience administering Microsoft 365, including GCC High, Entra , Exchange Online, Teams, and SharePoint.
• Proficiency in access control, security documentation, auditing tools, secure data transfer methods, and system hardening.
• Strong communication, documentation, organizational, and interpersonal skills.

• IAM Level II certification, such as CISSP, CISM or equivalent
• Experience securing Windows, Active Directory, and Linux systems using DISA STIGs and CIS Benchmarks
• Experience with secure software development, application security testing, or cybersecurity training programs.

Fish Eye Software is…