IT Security Manager

Protect and Strengthen Federal Systems with Tech Flow Inc.!

Tech Flow is seeking an experienced IT Security Manager to lead cybersecurity efforts for a high-impact federal program. In this critical role, you'll oversee the implementation, documentation, and continuous monitoring of security controls to safeguard applications that support government wide IT portfolio management. You'll ensure compliance with federal security standards such as FISMA and NIST SP 800-53, coordinate with key stakeholders, manage POA&Ms, and support Authorization to Operate (ATO) activities.

If you're driven by the mission of securing vital government systems and ensuring operational resilience, Tech Flow offers an opportunity to lead meaningful cybersecurity initiatives that make a difference.

• Serve as the primary cybersecurity lead for the program, overseeing implementation, assessment, and continuous monitoring of security controls for applications managed by the CPIC PMO.
• Ensure compliance with federal cybersecurity standards and frameworks, including FISMA, NIST SP 800-53, and the Risk Management Framework (RMF).
• Coordinate with the customer's Information System Security Officer (ISSO), system owners, and other stakeholders to maintain security authorization and compliance.
• Manage and track Plans of Action and Milestones (POA&Ms) to ensure timely remediation of identified vulnerabilities and audit findings.
• Lead preparation, documentation, and submission activities to support system Authorization to Operate (ATO) and ongoing authorization processes.
• Oversee incident response procedures, ensuring rapid identification, investigation, and mitigation of cybersecurity events.
• Conduct risk assessments, vulnerability scans, and security reviews to proactively identify and address potential threats.
• Maintain system security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), and Continuous Monitoring Plans.
• Provide cybersecurity guidance to development and operations teams to ensure secure design, configuration, and deployment of applications.
• Monitor compliance with change management and configuration control procedures to maintain system integrity.
• Prepare and deliver regular security status reports, dashboards, and briefings to leadership and the customer.
• Champion a culture of cybersecurity awareness and continuous improvement across the program team.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related discipline (Master's preferred).
• 8+ years of progressive experience in IT security management or cybersecurity operations within federal environments.
• Deep knowledge of federal cybersecurity frameworks, including FISMA, NIST SP 800-53, NIST RMF, and FedRAMP.
• Demonstrated experience supporting system authorization (ATO) activities and managing POA&Ms.
• Proven ability to lead incident response, vulnerability management, and continuous monitoring processes.
• Experience working with ISSOs, auditors, and federal compliance stakeholders.
• Familiarity with tools such as Nessus, Splunk, AWS Security Hub, or equivalent monitoring and assessment platforms.
• Strong understanding of cloud security, access control, and data protection principles.
• Excellent communication and leadership skills with the ability to brief executives and collaborate across technical and non-technical teams.
• Security certifications required: CISSP, CISM, or CAP (other relevant credentials such as Security+ or CEH are a plus).
• U.S. Citizenship and ability to obtain or maintain a Public Trust clearance required.

Founded in 1995 at the start of the dot-com revolution, Tech Flow helped large commercial clients such as Dream Works, Toshiba, MGM, and others modernize their business systems. Today, with deep operational roots in the bi-coastal innovation hubs of California and Washington DC, Tech Flow continues as a leader in applying innovative engineering, technology, integration solutions, and support services to the Federal Government's most demanding mission and business…