Information Systems Security Manager (ISSM)

Position: Information Systems Security Manager (ISSM)

Location: Crane, Indiana / NSWC Crane Area

Position Overview

Iron Will Ventures is seeking an experienced Information Systems Security Manager (ISSM) to support our growing operations in the Crane, Indiana area. This position will serve as a key information systems security resource responsible for establishing, implementing, maintaining, and continuously improving security practices for classified information systems supporting Iron Will programs and customer requirements.

The ISSM will work closely with company leadership, program managers, technical personnel, the Facility Security Officer (FSO), Information System Security Officers (ISSOs), customers, and Government security representatives to ensure classified information systems are appropriately authorized, configured, operated, maintained, monitored, and protected.

We are looking for an experienced security professional who understands the classified defense environment, can operate independently, and is equally comfortable developing security documentation, advising technical teams, supporting authorization activities, and working directly with Government and industry stakeholders.

What You'll Do

• Serve as a principal technical and administrative authority for classified information systems operating under the National Industrial Security Program (NISP).
• Ensure classified systems are designed, configured, operated, maintained, and decommissioned in accordance with contractual requirements, the NISPOM, DCSA guidance, Risk Management Framework (RMF) requirements, and applicable company security policies.
• Develop, implement, and maintain System Security Plans (SSPs), security authorization packages, Plans of Action and Milestones (POA&Ms), continuous-monitoring artifacts, configuration-management records, incident-response documentation, and related system-security documentation.
• Coordinate security authorization activities with the FSO, ISSOs, system owners, program managers, technical personnel, customers, and DCSA representatives.
• Lead or support security-control assessments, risk assessments, vulnerability assessments, configuration reviews, remediation activities, and continuous monitoring.
• Track identified findings through closure, validate corrective actions, and communicate material security risks and compliance gaps to appropriate stakeholders.
• Monitor cybersecurity threats, vulnerabilities, advisories, and security-relevant events and coordinate required patches, mitigations, configuration changes, and compensating controls.
• Lead or support cybersecurity incident investigation, containment, recovery, documentation, and reporting activities.
• Advise leadership, engineers, system administrators, program managers, and users regarding security architecture, system design, technical risk, compliance obligations, and secure operating practices.
• Establish and maintain procedures covering account management, privileged access, media protection, audit logging, configuration management, vulnerability management, backup and recovery, remote access, hardware/software inventories, system maintenance, and controlled system disposal.
• Ensure users receive appropriate security awareness, role-based, and system-specific training prior to receiving system access.
• Support proposals and contract execution by reviewing security requirements and recommending appropriate staffing, compliance approaches, security architecture, technical solutions, and security-related deliverables.
• Represent Iron Will during customer security reviews, assessments, inspections, and engagements with Government security personnel.
• Develop and maintain company policies, procedures, standards, and training materials supporting classified information systems.

SCIF Support

As required by Iron Will programs and customer needs, the ISSM may also support information systems located within or supporting Sensitive Compartmented Information Facilities (SCIFs).

Responsibilities may include:

• Coordinating with the FSO, SCIF Manager, program management, customer security representatives, and applicable Cognizant Security Authorities.
• Supporting authorization, configuration, operation, monitoring, maintenance, and decommissioning of information systems supporting Sensitive Compartmented Information (SCI).
• Providing information systems security input for SCIF planning, construction, renovation, relocation, connectivity, and other operational changes.
• Ensuring proposed system and infrastructure changes are evaluated through appropriate security, configuration-management, and authorization processes.
• Supporting inspections, assessments, customer reviews, and Government engagements involving SCIF-supported information systems.
• Maintaining required security documentation, configuration records, assessment evidence, continuous-monitoring results, and corrective-action plans.

Ideal Candidate

• Has demonstrated experience managing or supporting classified information systems within the Department of Defense or Intelligence Community environment.
• Possesses strong working knowledge of the NISPOM, DCSA requirements and processes, and the Risk Management Framework.
• Has experience developing and maintaining SSPs, POA&Ms, authorization packages, continuous-monitoring documentation, and related cybersecurity artifacts.
• Understands security controls, vulnerability management, configuration management, incident response, access control, audit requirements, and classified system operations.
• Can work effectively with security personnel, engineers, IT professionals, program managers, Government customers, and company leadership.
• Is comfortable working directly with Government security representatives and supporting formal assessments and inspections.
• Can translate regulatory and contractual security requirements into practical technical and operational solutions.
• Has the judgment and maturity to operate independently and represent Iron Will effectively with customers, partners, and Government stakeholders.
• Is willing to be hands-on and directly support security documentation, system authorization, compliance, and remediation activities rather than functioning solely as a manager.

Required qualifications

• 5+ years of cybersecurity experience
• 3+ years of experience with classified systems
• 2+ years of ISSM or ISSO experience
• Bachelor’s degree, or equivalent experience
• Security+ CE or higher, plus any DoD 8140 qualifications when contractually required
• DCSA experience
• NISP eMASS experience
• RMF, SSP, and POA&M experience
• Active Secret clearance

Preferred qualifications

• CISSP or CISM certification
• NBIS and/or DISS experience
• SCI and SCIF experience
• Top Secret clearance

About Iron Will

Iron Will Ventures supports complex defense missions by bringing together experienced technical professionals, responsive leadership, and a mission-focused approach to solving customer challenges. As our presence in the Crane community continues to grow, this ISSM will play an important role in establishing the secure infrastructure, processes, and culture necessary to support that growth.

Why Iron Will Ventures

Iron Will brings together experienced test professionals, engineers, analysts, and program leaders who have spent their careers executing complex national-security programs. Our role is not simply to observe the process. We help our customers plan the test, integrate the mission, identify the problems, drive them to resolution, execute successfully, and learn from the results.

Out Test; Out Analyze; Out Build.

Iron Will Ventures Inc. is an equal opportunity employer. We value diversity and do not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected status.