Information Systems Security Manager; ISSM

Role Overview:

Aalyria Technologies is seeking a highly experienced Information Systems Security Manager (ISSM) to lead the accreditation, operation, and sustained compliance of a newly established, multi-domain classified facility in Chantilly, Virginia. This is a senior individual contributor role with broad technical and programmatic responsibility across a complex, multi-network environment supporting multiple government customers at varying classification levels.

The ISSM will serve as the primary interface between Aalyria and government Authorizing Officials (AOs), ISSOs, and program security personnel across multiple networks and enclaves. The selected candidate will join during the facility standup phase and will have significant influence over security architecture, policy, and procedures from the ground up. This role requires deep, hands‑on familiarity with IC‑specific accreditation frameworks, multi‑domain network environments, and the operational discipline to build and sustain a rigorous information security program.

During the facility standup phase, the ISSM will carry direct ISSO responsibilities for initial systems prior to additional security team staffing, these responsibilities will diminish as the security team grows. This is a high‑trust, high‑autonomy position working directly alongside the FSO.

This position will begin as hybrid/remote during the facility design and pre‑accreditation phase, which is anticipated to span approximately 12 months
. During this period, the ISSM will conduct AO coordination, SSP development, architecture review, and policy drafting, work that does not require facility access. The ISSM will transition to full‑time on‑site at the Chantilly, Virginia facility upon lease execution and facility standup. Candidates must be willing and able to commit to on‑site operations upon facility opening.

Accreditation & Authority

• Lead all Assessment & Authorization (A&A) activities for multiple classified and unclassified information systems in accordance with ICD 503, RMF, and applicable IC and DoD directives.
• Develop, maintain, and submit System Security Plans (SSPs), Security Assessment Reports (SARs), and complete ATO/ATC packages across multiple network enclaves and authorization authorities.
• Manage pre‑authorization coordination with government AOs and system owners; track and drive Plan of Action & Milestones (POA&M) items to resolution.
• Support physical SCIF accreditation activities and coordinate with the FSO on ICD 705 compliance and TEMPEST/EMSEC requirements during and after facility construction.
• Coordinate network connection approvals with relevant government network operations centers and accrediting authorities across all authorized enclaves.

Operations & Continuous Monitoring

• Design and implement continuous monitoring programs for all authorized systems; maintain situational awareness of configuration status, vulnerability posture, and compliance across the environment.
• Serve as ISSO for multiple systems during the initial facility standup phase, managing transition of responsibilities to the broader security team as it is built out.
• Conduct regular security assessments, configuration compliance reviews, and vulnerability scans; track and verify remediation to closure.
• Lead incident detection, response, reporting, and after‑action remediation in coordination with the FSO and relevant government security personnel.
• Maintain all system documentation, security configuration baselines, hardware/software inventories, and change management records in compliance with applicable directives.

Program & Stakeholder Coordination

• Interface directly with program security officers for Special Access Program (SAP) network requirements,…