Information System Security Manager

Gray Analytics is seeking an Information System Security Manager (ISSM).

The selected candidate will perform day-to-day cybersecurity, RMF, vulnerability management, and continuous monitoring activities while coordinating with technical teams, external tenants, and cybersecurity leadership to maintain the system's authorization and security posture.

Responsibilities Support implementation and sustainment of the DoD Risk Management Framework (RMF) and system Authorization to Operate (ATO).Maintain eMASS authorization packages, including ACAS/Nessus results, DISA STIG checklists, security controls, and supporting artifacts.Develop, track, and maintain POA&Ms and coordinate remediation of identified vulnerabilities and compliance findings.Review applicable USCYBERCOM Cyber Tasking Orders (CTOs), DISA vulnerability notifications, and other cybersecurity directives for system and tenant applicability.Coordinate with external tenants and technical teams to communicate cybersecurity requirements, track remediation activities, and validate compliance.Support risk assessments for new applications, hardware, system changes, external connections, and architecture enhancements.Develop and maintain RMF documentation, including SSPs, RARs, continuous monitoring documentation, and interconnection agreements (ISAs/MOUs).Monitor applicable Federal, DoD, and NIST cybersecurity guidance and support implementation of evolving requirements, including Zero Trust and Post-Quantum Cryptography (PQC).Support cybersecurity assessments, inspections, configuration management activities, and other continuous monitoring requirements.