Information Systems Security Manager (ISSM)

Job overview

The Information Systems Security Manager (ISSM) role is listed in McLean, VA; the posting does not specify a remote arrangement. Compensation is not specified. Merlin Group works to advance technology adoption across the U.S. public sector and regulated commercial markets, including cybersecurity solutions.

What you'll do

• Coordinate environment access authorization and quarterly reviews
• maintain POA&M status, owners, and due dates and coordinate remediation
• perform vulnerability scans and report results
• manage change requests and Security Impact Assessments
• track recurring compliance activities, including incident response and contingency planning
• coordinate SBOM submissions
• manage security awareness training completion
• monitor FedRAMP program changes and assess their impact
• explain requirements to customers and stakeholders
• and report risks to leadership.

What we're looking for

Skills & competencies

information systems security manager

issm

cybersecurity

fedramp

cloud service providers

continuous monitoring

vulnerability management

poa&m

change control

mclean va

merlin international

security compliance

Work arrangement

• Weekend coverage required

Benefits & perks

• On-site gym
• medical, dental, and vision insurance
• FSA and EAP options
• 401(k) with employer match
• unlimited PTO.

Why this role

Requires 5+ years as an ISSM working with Cloud Service Providers in FedRAMP-authorized environments, hands-on FedRAMP Rev 5, 20x, and CR26 experience, and knowledge of vulnerability management, POA&M, and change control. FedRAMP ATO, project management credentials, and CISSP are preferred.

About the employer

Merlin International Inc is hiring for this role. Industry: Computer Systems Design Services. Sector: 54.