information technology security manager

Pacific Medical Centers

<div><p><b>Description</b></p>
<p>Manager Information Security- Renton, Washington</p>
<p>Schedule- Full Time/ Days</p>
<p>Oversees day-to-day operations and staff of the Security team. Prioritizes workloads of the group and acts in a supervisory role. Responsible for security policy and procedure development, enterprise security awareness and working to ensure compliance with internal and external regulatory standards such as HIPAA and DIACAP related to information security.</p>
<p>Providence caregivers are not simply valued &ndash; they&rsquo;re invaluable. Join our team at USFHP and thrive in our culture of patient-focused, whole-person care built on understanding, commitment, and mutual respect. Your voice matters here, because we know that to inspire and retain the best people, we must empower them.</p>
<p><b>Benefits and perks:</b></p>
<ul><li>Competitive pay (including holiday pay &amp; shift pay differentials)</li>
<li>Best-in-class benefits &ndash; full medical, dental and vision coverage from your first day</li>
<li>401(k) plan with employer matching &amp; complementary retirement planner</li>
<li>Generous paid time off for vacation, sick days and holidays</li>
<li>Tuition reimbursement &amp; student loan forgiveness programs</li>
<li>Wellness &amp; mental health assistance programs</li>
<li>Back-up child &amp; elder care to help with care disruptions for your family</li>
<li>Voluntary benefits, like pet, auto and home insurance, and more!</li>
</ul><p><b>Required Qualifications:</b></p>
<ul><li>Bachelor's Degree in Information technology Or Equivalent IT technical and managerial experience.</li>
<li>3 years of Managing technical and/or security staff.</li>
<li>Demonstrated experience developing customer service work processes in the area of technology.</li>
</ul><p><b>Preferred Qualifications:</b></p>
<ul><li>Upon hire: CISSP, CISA, CHP, CHSS, GIAC, MCSE, MCSA certifications</li>
<li>Experience in a healthcare IT setting.</li>
</ul><p>Accepting a new position at another facility that is part of the Providence family of organizations may change your current benefits. Changes in benefits, including paid time-off, happen for various reasons. These reasons can include changes of Legal Employer, FTE, Union, location, time-off plan policies, availability of health and welfare benefit plan offerings, and other various reasons.</p>
<p><b>About Providence</b></p>
<p>At Providence, our strength lies in Our Promise of &ldquo;Know me, care for me, ease my way.&rdquo; Working at our family of organizations means that regardless of your role, we&rsquo;ll walk alongside you in your career, supporting you so you can support others. We provide best-in-class benefits and we foster an inclusive workplace where diversity is valued, and everyone is essential, heard and respected. Together, our 120,000 caregivers (all employees) serve in over 50 hospitals, over 1,000 clinics and a full range of health and social services across Alaska, California, Montana, New Mexico, Oregon, Texas and Washington. As a comprehensive health care organization, we are serving more people, advancing best practices and continuing our more than 100-year tradition of serving the poor and vulnerable.</p>
<p>Posted are the minimum and the maximum wage rates on the wage range for this position. The successful candidate's placement on the wage range for this position will be determined based upon relevant job experience and other applicable factors. These amounts are the base pay range; additional compensation may be available for this role, such as shift differentials, standby/on-call, overtime, premiums, extra shift incentives, or bonus opportunities.</p>
<p>Providence offers a comprehensive benefits package including a retirement 401(k) Savings Plan with employer matching, health care benefits (medical, dental, vision), life insurance, disability insurance, time off benefits (paid parental leave, vacations, holidays, health issues), voluntary benefits, well-being resources and much more. Learn more at providence.jobs/benefits.</p>
<p>Applicants in the Unincorporated County of Los Angeles: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Unincorporated Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.</p>
<p><b>About the Team</b></p>
<p>Pacific Medical Centers (PacMed) is a private, not-for-profit, primary and integrated multi-specialty health care network with outpatient clinics and primary and specialty care providers in King, Snohomish and Pierce counties. We combine decades of patient-centered care with cutting-edge technology, first-class facilities and board-certified providers.</p>
<p>Our strong team environment and respect for our people&mdash;at all levels and from all backgrounds&mdash;allow us to provide authentic care that achieves the highest-quality patient outcomes, backed by the strong network of resources and support through our affiliation with the Providence family, including local partners like Swedish Health Services.</p>
<p>Providence is proud to be an Equal Opportunity Employer. We are committed to the principle that every workforce member has the right to work in surroundings that are free from all forms of unlawful discrimination and harassment on the basis of race, color, gender, disability, veteran, military status, religion, age, creed, national origin, sexual identity or expression, sexual orientation, marital status, genetic information, or any other basis prohibited by local, state, or federal law. We believe diversity makes us stronger, so we are dedicated to shaping an inclusive workforce, learning from each other, and creating equal opportunities for advancement.</p>
<p>For any concerns with this posting relating to the posting requirements in RCW 49.58.110(1), please click here where you can access an email link to submit your concern.</p>
<p><b>Requsition ID:</b> 422567
</p><p><b>Company:</b> Pacific Medical Jobs
</p><p><b>Job Category:</b> Information Security
</p><p><b>Job Function:</b> Information Technology
</p><p><b>Job Schedule:</b> Full time
</p><p><b>Job Shift:</b> Day
</p><p><b>Career Track:</b> Leadership
</p><p><b>Department:</b> 3060 WA USFHP
</p><p><b>Address:</b> WA Renton 620 Naches Ave SW
</p><p><b>Work Location:</b> Blackriver Corporate Park-Renton
</p><p><b>Workplace Type:</b> On-site
</p><p><b>Pay Range:</b> $74.17 - $117.10
</p><p>The amounts listed are the base pay range; additional compensation may be available for this role, such as shift differentials, standby/on-call, overtime, premiums, extra shift incentives, or bonus opportunities.</p></div><p></p>

Manager Information Security - USFHP

Department of Administrative Services

<div><div>Initial Posting Date:</div>
03/19/2026<div></div><div>
Application Deadline:</div>
04/05/2026<div></div><div>
Agency:</div>
Department of Administrative Services<div></div><div>
Salary Range:</div>
$8,717 - $13,477<div></div><div>
Position Type:</div>
Employee<div></div><div>
Position Title:</div>
SOC Manager (IT Cyber Security Manager 2)<div></div><div>
Job Description:</div><div>
Now Hiring, Apply Today! SOC Manager (IT Cyber Security Manager 2)</div><div><div>
Enterprise Information Services</div> (EIS) is a state government-wide information technology (IT) organization led by Oregon&rsquo;s State Chief Information Officer (CIO). The <div>Cyber Security Services</div> (&ldquo;CSS&rdquo;) is an information security management section within EIS. CSS&rsquo;s mission: Leading Oregon Government to safeguard the State&rsquo;s information resources. CSS is comprised of the following units: Governance Risk and Compliance, Enterprise Security Architecture, Network Security, and Security Operations Center (SOC).</div><div></div><div>
What You&rsquo;ll Do</div><div>
As the SOC Manager, you will be at the center of Oregon&rsquo;s cyber defense, the heartbeat of the enterprise, leading the day-to-day operations of the State of Oregon&rsquo;s Security Operations Center and ensuring continuous monitoring, detection, analysis, and response to threats that impact enterprise (State of Oregon) systems and critical public services. You will guide and grow an extremely talented team of SOC analysts, maintain 24x7 readiness, and make sure the tools, workflows, playbooks, and escalation paths are not just documented, but tested and battle-ready. You will turn strategy into action, translate the SOC Director&rsquo;s vision and enterprise direction into operational excellence, and lead the charge during high-impact incidents where clear thinking, calm leadership, and teamwork matter most. Working side-by-side with Network, Endpoint, Cloud, Vulnerability, and agency partners across the state, you will help coordinate response, protect Oregonians&rsquo; data, and continuously strengthen our security posture. This is a role for a leader who thrives in fast-moving environments, loves developing people, and wants to make a real, visible impact&mdash;every day&mdash;on the security and resilience of the State of Oregon.</div><div></div><div>
For a full review of the position duties, details, and working conditions, please click <div>here.</div></div><div></div><div>
This Is What You Need to Qualify</div><ul><li><div>
Six years of supervision, management, or progressively related experience*; OR</div></li><li><div>
Three years of related* experience and a bachelor's degree in a related* field.</div></li></ul><div></div><ul><li>Related qualifying information systems experience in: Microsoft Defender for Endpoint, Identity, Office 365, and Cloud Apps, Attack surface reduction (ASR), device timeline, evidence &amp; response actions, Live response sessions and EDR forensics; Qualifying Bachelor degree in Information Technology, Computer Science, or closely related field.</li></ul><div></div><div>
The ideal candidate will possess the following desired skills and attributes:</div><ul><li><div>
A strong foundation in cybersecurity operations, with the ability to understand, oversee, and guide threat detection, incident response, vulnerability management, and security monitoring across on-premises, cloud, and hybrid environments.</div></li><li><div>
Operational fluency with modern SOC technologies and workflows, including SIEM, EDR/XDR, log management, alerting, case management, and investigation platforms, with the ability to ask the right questions, challenge assumptions, and make informed decisions when not hands-on in the tools.</div></li><li><div>
The mindset of a cyber operations leader, able to direct investigations, validate analyst conclusions, prioritize response actions, and ensure incidents are managed effectively from triage through recovery.</div></li><li><div>
A deep understanding of how enterprise identity, endpoints, networks, cloud services, and security controls interconnect, and how attackers move across them, utilizing the MITRE Att&amp;ck Methods.</div></li><li><div>
Proven ability to build, mentor, and sustain high-performing SOC teams, fostering trust, accountability, resilience, and calm leadership in high-pressure, 24x7 environments.</div></li><li><div>
The judgment to balance risk, impact, and operational tempo, ensuring the right resources are focused on the most critical threats and that staff are supported and not burned out.</div></li><li><div>
The ability to evaluate and improve SOC processes, playbooks, tooling, and staffing models, turning gaps and lessons learned into practical operational improvements.</div></li><li><div>
Strong communication and leadership presence, with the ability to translate technical realities into clear guidance for executives, agency partners, and incident commanders.</div></li><li><div>
Experience coordinating complex incident response efforts across multiple teams, agencies, and external partners, bringing clarity, structure, and confidence during major events.</div></li><li><div>
Extensive experience (typically 7+ years in cybersecurity, including leadership or senior operational roles within a SOC, IR, or security operations environment).</div></li><li><div>
Familiarity with security frameworks and best practices (NIST CSF, incident response lifecycle, MITRE ATT&amp;CK) and how to apply them at an operational and programmatic level.</div></li></ul><div></div><div>
Preference Statement</div><div>
Preference will be given to candidates with one or more of the following certifications: CISSP: (Certified Information Systems Security Professional), SC-200: Microsoft Security Operations Analyst, SC-100: Cybersecurity Architect, AZ-500: Azure Security Engineer, CompTIA CySA+ or Security+ , GIAC (GCIA, GCIH, GMON) for advanced threat hunting.</div><div></div><div>
How to Apply</div><ul><li><div>
Click on the &quot;Apply&quot; link above to complete your online application and submit by the posted closing date and time. For step-by-step instructions click <div>apply to work for the state</div> or <div>current state employee.</div></div></li><li><div>
Required Documents: cover letter and resume</div></li><li><div>
The work experience and/or education section of your application must clearly demonstrate how you meet all the minimum qualifications and desired skills and attributes listed above. Your cover letter should address your skills supporting an enterprise level environment. <i>Failing to attach required documents may result in disqualification of your application.</i></div></li><li><div>
The State of Oregon does not request or require your age, date of birth, attendance or graduation dates from an educational institution during the application process.</div></li></ul><ul><li><div>
Be sure to check Workday and your email for additional tasks and updates. After hitting submit there may be additional required tasks for you to complete prior to the announcement closing. Please save a copy of this job announcement for reference, as it is not available for you to view after the announcement deadline.</div></li></ul><ul><li><div>
If you are requesting Veteran&rsquo;s Preference, you will receive a Workday task to submit your supporting documents. Be sure to submit your documentation prior to the close date of this posting in order to have the preference considered. Click on the following link for additional information on <div>Veterans&rsquo; Preference</div>.</div></li></ul><div></div><div>
Benefits of Joining Our Team</div><div>
The Department of Administrative Services (DAS) Team strives to create an environment that is supportive and encourages work-life balance and innovation. The EIS team is built on collaboration and support. We work together to ensure our customer agencies receive the highest quality of service. We take pride in our work and look for ways to innovate. EIS is committed to hiring highly skilled, diverse and dedicated employees who will bring a unique skill set to the team.</div><div>
Our amazing <div>benefits</div> include:</div><ul><li><div>
Comprehensive Health Coverage: Low-cost medical, vision, and dental plans for you and your family. Additional benefits include life insurance, short- and long-term disability, deferred compensation savings plans, and flexible spending accounts for health and childcare. Optional benefits including life insurance, disability, FSA, and more</div></li><li><div>
Generous Paid Time Off: 11 holidays, 3 personal business days, monthly sick leave and vacation leave that increases with years of service.</div></li><li><div>
Career Development: Opportunities for professional growth and advancement.</div></li><li><div><div>
Get There</div><ul><li>Oregon&rsquo;s easy-to-use carpool matching tool and trip planner.</li></ul></div></li><li><div><div>
Public Service Loan Forgiveness</div>: You may qualify for the PSLF program.</div></li><li><div>
Hybrid Work Opportunity: This position supports a hybrid work schedule. You can expect to work in the office 1 day per week, with work arrangements periodically reviewed to ensure business needs are met.</div></li></ul><div></div><div>
Additional Details</div><ul><li><div>
This announcement is for one, full-time, permanent, Management Service- Supervisory, SOC Manager (IT Cyber Security Manager 2) position and may be used to fill future vacancies.</div></li><li><div>
The salary listed is the non-PERS qualifying salary range. If the successful candidate is PERS qualifying, the salary range will reflect an additional 6.95%.</div></li><li><div>
Review the <div>Classification and Compensation</div> page for more details on the classification, or you may visit our website for information on the job offer process following <div>pay equity</div>.</div></li><li><div>
Applicants must be authorized to work in the United States. Applicants who require VISA sponsorship will not be considered at this time.</div></li><li><div>
Employee will be required to possess and maintain a valid driver&rsquo;s license issued by the state where the employee resides or provide an acceptable alternate form of transportation.</div></li><li><div>
Employee is required to obtain and maintain CJIS clearance.</div></li><li><div>
Finalists will be subject to a computerized criminal history check. Adverse background data may be grounds for immediate disqualification.</div></li><li><div>
If you need an application in an alternate format in order to complete the process or for accommodation requests under the Americans with Disabilities Act (ADA), you may contact the Recruiter, Nancy Karnas at: nancy.karnas@das.oregon.gov | 971-719-3083.</div></li></ul><div></div><div>
Helpful Links &amp; Resources</div><div><div>
How to Set Job Alerts</div> | <div>Workday Applicant FAQ</div> | <div>What You Need to Know to Get the Job</div></div><div><div>
Oregon Job Opportunities Webpage</div> | <div>Classification and Compensation</div> | <div>Pay Equity</div></div><div></div><div><i>
Come for a job. | Stay for a career. | Make a difference... for a lifetime!</i></div><div></div><div><i>
The Department of Administrative Services is an Equal Opportunity, Affirmative Action Employer Committed to Workforce Diversity. At the Department of Administrative Services, we embody the value of hiring a workforce representative of the communities we serve, understanding that a diverse workforce revitalizes our state. We value diversity and foster a positive and welcoming environment where all employees can thrive.</i></div></div><div></div>

SOC Manager (IT Cyber Security Manager 2)

Wells Fargo

<div><p><b>About this role:</b></p><p>
Wells Fargo is seeking an experienced Information Security leader to join the Data Loss Prevention (DLP) Solutions Team as an Associate Manager. This role supports the DLP Manager by leading day‑to‑day operations and supervising a team of technology professionals responsible for DLP rule testing, exceptions management, control operations, and business‑as‑usual (BAU) processes.</p><p></p><p>
The Associate Manager plays a key role in ensuring work is prioritized appropriately, operational processes run smoothly, and risks or issues are surfaced early. This role partners closely with the Threat and Detection team, security control stakeholders, and business-aligned security leaders to reduce data loss risk and improve operational effectiveness across the enterprise. Regular interaction with mid‑level and senior leaders across all three lines of defense is expected.</p><p></p><p><b>
In this role, you will:</b></p><p><b>
Team &amp; Operational Support</b></p><ul><li>
Support the DLP Manager in coordinating team priorities, deliverables, and operational goals.</li><li>
Assist with test DLP policy design, testing, implementation, and tuning, helping ensure policies are effective and operationally manageable.</li><li>
Support exceptions management and certification activities, including tracking, documentation, and timely follow‑ups.</li><li>
Help manage day‑to‑day workflow, including intake, prioritization, and assignment of work across the team.</li><li>
Provide people support for a technical operations team, including onboarding, coaching, and ongoing development, with guidance from the DLP Manager.</li><li>
Identify operational challenges or risks and escalate them with clear context and recommendations.</li></ul><p><b>
Collaboration &amp; Communication</b></p><ul><li>
Work closely with the Threat and Detection Team to support exception decisions and improvements to DLP rule effectiveness.</li><li>
Collaborate with BISOs, technology partners, and business stakeholders to help address data protection concerns.</li><li>
Communicate operational updates, risks, and process changes clearly to both technical and non‑technical audiences.</li><li>
Act as a reliable point of contact for routine DLP operational questions and coordination needs.</li></ul><p><b>
Governance, Risk &amp; Compliance Support</b></p><ul><li>
Assist with initiatives or projects that impact DLP operations across one or more lines of business.</li><li>
Help ensure DLP processes align with audit, regulatory, and risk management expectations.</li><li>
Support responses to audit requests, regulatory inquiries, and issue remediation efforts.</li><li>
Maintain and update operational documentation, procedures, and supporting materials.</li></ul><p><b>
DLP Operations &amp; Risk Reduction</b></p><ul><li>
Support the review and management of operational allows and associated exceptions, ensuring appropriate risk awareness.</li><li>
Partner with peers to help identify and reduce potential data loss risks.</li><li>
Assist with ongoing DLP rule tuning and optimization to reduce false positives and operational friction.</li><li>
Contribute to improvements in DLP triage and workflow efficiency, including use of automation where appropriate.</li><li>
Stay informed on relevant threat trends and provide operational input to support business initiatives.</li></ul><p><b>
Required Qualifications:</b></p><ul><li><b>
2+ years</b> of Information Security Analysis experience, or equivalent demonstrated through a combination of work experience, training, military experience, or education</li><li><b>
1+ year</b> of people leadership or management experience</li></ul><p><b><br>
Desired Qualifications:</b></p><ul><li><b>
2+ years</b> of Data Loss Prevention (DLP) Operations experience, including event triage, response, and control tuning</li><li><b>
2+ years</b> of Information Security Governance, Risk, and Change Management (GRC) experience</li><li><b>
2+ years</b> working with user behavioral analytics or machine learning&ndash;enabled cybersecurity capabilities</li><li>
Security Operations and Incident Management experience</li><li><b>
1+ year</b> of experience standing up or managing new operational risk controls</li><li>
Strong ability to assess issues, make timely decisions, implement solutions, and influence change</li><li>
Demonstrated customer relationship management skills</li><li>
Knowledge and understanding of threat analysis and assessment of current and emerging information security risks</li><li>
Experience working in a large enterprise environment</li><li>
Knowledge of regulatory requirements (e.g., <b>GDPR, GLBA, CCPA</b>) and security control frameworks (e.g., <b>NIST</b>)</li><li>
Familiarity with the <b>banking or financial services industry</b></li></ul><p></p><p><b>
Job Expectations:</b></p><ul><li>
Ability to travel up to 10% of the time</li><li>
Ability to work in a fast-paced, high-demand environment while balancing multiple priorities.</li><li>
This position offers a hybrid work schedule</li><li>
This position is not eligible for Visa sponsorship</li></ul><p></p><p><b>
Locations:</b></p><ul><li>
1525 WT Harris Blvd, Charlotte, North Carolina</li><li>
2600 S Price Rd, Chandler, Arizona</li><li>
194 Wood Ave S, Iselin, NJ</li><li>
401 Las Colinas Blvd W, Irving, TX</li></ul></div>

Information Security Engineering Associate Manager DLP

Rheinmetall

<div><div>American Rheinmetall is a leader in the design, development, and production of advanced tracked and wheeled vehicles, vehicle systems, and critical components that support U.S. military modernization. Our expertise spans electronic and mechanical systems, fabricated structures, armored products, rubber solutions, and track systems, delivering reliable innovation to both defense and commercial markets. As part of the global Rheinmetall family, we combine proven heritage with forward-looking technology to provide solutions that defend and feed the world.</div>
<div></div><div><b>Job Summary:
</b></div><div>The Information System Security Manager (ISSM) is responsible for upholding the Authority to Operate (ATO) process ensuring classified computing environment meets all DoD regulations and requirements. This role will collaborate with the DCSA ISP, AR FSO, Program Managers, Engineers, and other groups as needed within the company.</div>
<div><b>Essential Functions:
</b></div><ul><li>Responsible for the Risk Management Framework (RMF) process as stipulated by the 32 CFR Part 117 - National Industrial Security Operating Manual (NISPOM), and the DCSA Assessment and Authorization Guide (DAAG).</li>
<li>Monitor RMF compliance by performing periodic self-inspections, tests, and reviews of information systems to ensure classified environment is operating as authorized.</li>
<li>Maintain day-to-day security posture and continuous monitoring of IS including security event log review and analysis.</li>
<li>Perform Assessment and Authorization (A&amp;A) activities such as information system certification testing of required configuration controls and preparing and maintaining various documentation such as: Standard Operating Procedures (SOP), System Security Plan (SSP), Risk Assessment Report (RAR), Security Controls Traceability Matrix (SCTM), etc</li>
<li>Manages and maintains Continuous Monitoring (ConMon)/Plan of Action and Milestones (POA&amp;M) reports</li>
<li>Perform as a Data Transfer Agent loading unclassified files to the classified environment</li>
<li>Responsible for security sustainment activities including hardware change management, software change management, account management, media protection, user interface, file transfers, etc</li>
<li>Assists the FSO and Computer Incident Response Team (CIRT) in data spill incident response</li>
<li>Maintain thorough understanding of NIST 800-53 controls, determines controls applicable to the application, and documents control implementation in the SCTM</li>
<li>Perform other tasks as needed</li>
</ul><div><b>Supervisory Responsibilities:</b></div>
<div>Does this position supervise others? No</div>
<div></div><div><b>Minimum Qualifications:</b></div>
<ul><li>Active Secret security clearance</li>
<li>Familiarity with eMASS and RMF process</li>
<li>Demonstrated strong critical thinking and problem-solving skills</li>
<li>Detail oriented and self-motivated</li>
<li>Ability to effectively prioritize multiple projects</li>
<li>Ability to work with people in a team environment and deal effectively with changing project priorities</li>
</ul>
<div></div><div><b>Education &amp; Experience
</b></div><ul><li>Bachelor&rsquo;s degree or equivalent experience</li>
<li>3-5 years of experience as an ISSO or System Administrator role</li>
<li>Strong organizational and communication skills</li>
</ul>
<div></div><div><b>Background Prerequisites:</b></div>
<div>Must undergo and meet company standards for background check, employment verification, reference checks, physical, and controlled substance testing.</div>
<div></div><div><b>Preferred Qualifications:</b></div>
<ul><li>3-5 years of experience as an ISSO or System Administrator</li>
<li>Experience using eMASS and knowledge of RMF process</li>
<li>Knowledge of Data Transfer Agent</li>
<li>Ability to effectively prioritize multiple projects</li>
<li>Ability to work with people in a team environment and deal effectively with changing project priorities</li>
</ul>
<div></div><div><b>Working Conditions and Physical Demands</b></div>
<div>With or without reasonable accommodation requires the physical and mental capacity to perform effectively all essential functions. In addition to other demands, the demands of the job include:</div>
<ul><li>For physical requirements, indicate Rarely, Occasionally, Frequently, or Continuously where possible
<ul><li>Rarely: exists, but not on a regular basis</li>
</ul></li><li>Hazards, tasks, PPE, ergonomic concerns, travel requirements, workspace (close proximity to others)</li>
<li>Ability to lift up to 25 pounds occasionally</li>
</ul>
<div></div><div><b>Equal Employment Opportunity Statement:</b></div>
<div>American Rheinmetall provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sex (including pregnancy), gender identity, national origin, age, disability, or marital status, in accordance with applicable federal, state and local laws. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.</div></div>

Information System Security Manager

ESP Legal

<div>
 <p>
  IT Security Manager
 </p>
 <p>
  Position Summary
 </p>
 <ul>
  <li>
   The IT Security Manager plays a critical leadership role in shaping and executing the firm&rsquo;s cybersecurity strategy. Reporting to the Chief Information Officer (CIO), this individual leads the firm&rsquo;s Information Security team and works closely with partners, firm leadership, and IT teams to maintain and strengthen the firm&rsquo;s security posture.
  </li>
  <li>
   This role requires both strategic vision and hands-on leadership. The IT Security Manager will oversee daily security operations, guide long-term security initiatives, and serve as a trusted advisor to leadership on all matters related to information security, risk management, and regulatory compliance.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  Scope &amp; Leadership
 </p>
 <ul>
  <li>
   The IT Security Manager serves as the operational leader of the firm&rsquo;s information security program and partners closely with the CIO to advance cybersecurity strategy. Key leadership responsibilities include:
  </li>
  <li>
   Directing the day-to-day operations of the firm&rsquo;s information security program
  </li>
  <li>
   Managing and mentoring the Information Security team while fostering a culture of continuous improvement
  </li>
  <li>
   Leading implementation and oversight of security technologies, policies, and controls
  </li>
  <li>
   Partnering with infrastructure, cloud, and application teams to embed security across all systems and services
  </li>
  <li>
   Representing the firm&rsquo;s security program in discussions with leadership, partners, clients, and external auditors
  </li>
  <li>
   Supporting the development of the firm&rsquo;s long-term cybersecurity roadmap and strategic initiatives
  </li>
  <li>
   Maintaining and evolving governance, risk management, and security operations frameworks
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  Key Responsibilities
 </p>
 <ul>
  <li>
   Security Operations &amp; Risk Management
  </li>
  <li>
   Oversee the deployment, configuration, and optimization of security platforms, including MDR, EDR, MFA, IAM, DLP, vulnerability management, and email security tools
  </li>
  <li>
   Monitor the firm&rsquo;s security landscape to identify vulnerabilities and proactively mitigate risk
  </li>
  <li>
   Lead security incident response activities, coordinating with internal teams and external partners to ensure rapid resolution and recovery
  </li>
  <li>
   Conduct security assessments, penetration testing exercises, and tabletop simulations to strengthen incident readiness
  </li>
  <li>
   Evaluate emerging threats and implement strategies to protect firm systems and data
  </li>
  <li>
   Security Governance &amp; Compliance
  </li>
  <li>
   Develop, maintain, and enforce security policies, standards, and procedures
  </li>
  <li>
   Ensure compliance with applicable regulatory requirements and industry frameworks including ISO 27001, GDPR, CCPA, and client security guidelines
  </li>
  <li>
   Manage the firm&rsquo;s client security program, including security questionnaires, audits, and outside counsel guidelines
  </li>
  <li>
   Oversee vulnerability management and risk remediation initiatives across the organization
  </li>
  <li>
   Team Leadership &amp; Development
  </li>
  <li>
   Lead, mentor, and develop a team of information security professionals
  </li>
  <li>
   Recruit, develop, and retain top security talent
  </li>
  <li>
   Ensure the team maintains current knowledge of security tools, threats, and best practices
  </li>
  <li>
   Promote collaboration across IT and business teams to maintain a strong security culture
  </li>
  <li>
   Security Awareness &amp; Communication
  </li>
  <li>
   Manage the firm&rsquo;s security awareness and training programs
  </li>
  <li>
   Communicate security risks, initiatives, and program status to firm leadership and partners
  </li>
  <li>
   Serve as a liaison between the security team and other departments to ensure alignment on security priorities
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Remote Work
  </strong>
  This position may be primarily or fully remote, with occasional travel or in-office presence as required. Preference will be given to candidates located within commuting distance of one of the firm's nationwide offices.
 </p>
 <p>
 </p>
</div>


Information Security Manager

Cherokee Federal

<div><p>Information Systems Security Manager
 </p><p>***This position requires an active Secret clearance to be considered***
</p><p>A government contract requires that this position be restricted to U.S. citizens or legal permanent residents. You must provide documentation that you are a U.S. citizen or legal permanent resident to qualify.
 </p><p>The Information Systems Security Manager (ISSM) leads all information assurance efforts to obtain and maintain the Authority to Operate (ATO) for a mission-critical system supporting the USAF PACAF GeoBase program. The primary focus of this role is overseeing the system's security posture and managing the RMF lifecycle. Responsibilities include RMF control implementation, system hardening, vulnerability tracking, and leading ATO documentation efforts. The ideal candidate will have a strong background in DoD cybersecurity, with secondary familiarity in system/database administration.
 </p><p><b>Compensation &amp; Benefits:
</b></p><p>Estimated Starting Salary Range for Information Systems Security Manager: $130,000 to $137,000.
</p><p>Pay commensurate with experience.
</p><p>Full time benefits include Medical, Dental, Vision, 401K, and other possible benefits as provided. Benefits are subject to change with or without notice.
 </p><p>Information Systems Security Manager Responsibilities Include:
</p><ul><li><p>Lead the implementation, documentation, and continuous monitoring of Risk Management Framework (RMF) controls.
</p></li><li><p>Serve as the primary point of contact for all matters related to the system&rsquo;s certification and accreditation (C&amp;A) and ATO.
</p></li><li><p>Maintain and update all system security artifacts in eMASS, and create and manage Plans of Action &amp; Milestones (POA&amp;M).
</p></li><li><p>Apply and maintain DISA STIGs across the architecture, including Windows Server, Oracle databases, and IIS web servers.
</p></li><li><p>Perform and document ACAS and SCAP scan reviews and coordinate all vulnerability remediation efforts.
</p></li><li><p>Oversee enterprise-level system hardening, patching, and the management of configuration baselines (GPOs, local security policy).
</p></li><li><p>Ensure the secure configuration of server hardware and software within a distributed IT architecture.
</p></li><li><p>Secure applications and information using Public Key Infrastructure (PKI).
</p></li><li><p>Troubleshoot network, database, and application connectivity issues that impact performance or security.
</p></li><li><p>Draft and maintain critical security documentation, including System Security Plans (SSPs), Standard Operating Procedures (SOPs), and change requests for the Configuration Control Board (CCB).
</p></li><li><p>Ensure systems remain compliant with all DoD patching and IAVM directives.
</p></li><li><p>Performs other job-related duties as assigned.
 </p></li></ul><p>Information Systems Security Manager Experience, Education, Skills, Abilities requested:
</p><ul><li><p>Bachelor&rsquo;s degree in a relevant technical field.
</p></li><li><p>CompTIA Security+ certification (or other DoD 8570 IAT Level II or higher certification).
</p></li><li><p>Demonstrated experience with DoD Information Assurance policies and the full life cycle of the certification and accreditation (C&amp;A) process.
</p></li><li><p>Hands-on experience with the Risk Management Framework (RMF) and creating/managing artifacts in eMASS.
</p></li><li><p>Proven experience in a DoD environment troubleshooting desktop, web, database, or server problems.
</p></li><li><p>Strong understanding of DISA STIGs and vulnerability management tools (e.g., ACAS, SCAP).
</p></li><li><p>Experience administering and securing Windows Server environments, including IIS.
</p></li><li><p>Strong technical documentation and communication skills.
</p></li><li><p>Must pass pre-employment qualifications of Cherokee Federal
 </p></li></ul><p>Company Information:
</p><p>Cherokee Nation Strategic Programs (CNSP) is a part of Cherokee Federal &ndash; the division of tribally owned federal contracting companies owned by Cherokee Nation Businesses. As a trusted partner for more than 60 federal clients, Cherokee Federal LLCs are focused on building a brighter future, solving complex challenges, and serving the government&rsquo;s mission with compassion and heart. To learn more about CNSP, visit cherokee-federal.com.
 </p><p>#CherokeeFederal
</p><p>#LI-MM1
</p><p>#AppC
 </p><p>Cherokee Federal is a military friendly employer. Veterans and active military transitioning to civilian status are encouraged to apply.
 </p><p>Similar searchable job titles:
</p><ul><li><p>Information Systems Security Officer (ISSO)
</p></li><li><p>Senior Cybersecurity Engineer
</p></li><li><p>RMF Systems Engineer
</p></li><li><p>Windows Systems Administrator
</p></li><li><p>Information Assurance Engineer
</p></li></ul><p>Keywords:
</p><ul><li><p>RMF
</p></li><li><p>eMASS
</p></li><li><p>Security+
</p></li><li><p>STIG
</p></li><li><p>ACAS
</p></li></ul><p>Legal Disclaimer: All qualified applicants will receive consideration for employment without regard to protected veteran status, disability or any other status protected under applicable federal, state or local law.
 </p><p>Many of our job openings require access to government buildings or military installations.</p></div>

Information Systems Security Manager

Collins Aerospace

<div><p><b>Date Posted:</b></p>
2026-03-18<p><b>
Country:</b></p>
United States of America<p><b>
Location:</b></p>
US-MD-FULTON-8170 ~ 8170 Maple Lawn Blvd ~ MAPLE LAWN, Ste 190, 200 &amp; 300<p><b>
Position Role Type:</b></p>
Onsite<p><b>
U.S. Citizen, U.S. Person, or Immigration Status Requirements:</b><b>
</b></p>Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance
<p><b>Security Clearance Type:
</b></p>DoD Clearance: Secret<p><b>
Security Clearance Status:
</b></p>Active and existing security clearance required on day 1<p></p><p>
The Information Systems Security Manager (ISSM) serves as the primary cybersecurity authority for assigned classified and controlled information systems. This role is responsible for the end-to-end execution and oversight of cybersecurity activities in compliance with applicable U.S. Department of Defense (DoD) laws, regulations, and contractual requirements. As an advanced individual contributor, the ISSM independently leads system authorization, continuous monitoring, inspection readiness, and risk management activities, while providing technical oversight and mentorship to Information Systems Security Officers (ISSOs) and maintaining accountability for cybersecurity outcomes.</p><p></p><p>
Responsibilities include implementing and sustaining cybersecurity requirements defined by government frameworks and guidance, including the Risk Management Framework (RMF), Joint Special Access Program Implementation Guide (JSIG) for SAP systems, NIST publications, NISPOM, and the DCSA Assessment and Authorization Guide (DAAG), and associated assessment and authorization guidance</p><p></p><p><b><i>
** This position is onsite in Fulton, MD. **</i></b></p><p></p><p><b>
What YOU will do:</b></p><ul><li><p>
Independently own cybersecurity responsibilities for assigned information systems, ensuring security objectives are achieved and organizational risk is effectively managed.</p></li><li><p>
Serve as the primary cybersecurity authority for inspections, assessments, audits, and continuous monitoring, leading preparation, execution, and response activities to maintain authorization and inspection readiness.</p></li><li><p>
Execute and maintain system authorization using the Risk Management Framework (RMF) and applicable guidance, including the Joint Special Access Program Implementation Guide (JSIG) for Special Access Program systems and the DCSA Assessment and Authorization Guide (DAAG) for DoD collateral systems.</p></li><li><p>
Maintain awareness and working knowledge of DD Form 254s and contractual security requirements, ensuring cybersecurity controls, inspection scope, and authorization boundaries align with approved mission and program objectives.</p></li><li><p>
Develop, maintain, and validate cybersecurity plans, authorization artifacts, and compliance documentation to support audit-ready operations.</p></li><li><p>
Identify, assess, and communicate cybersecurity risk to senior leadership and Authorizing Officials, including the impact of system changes, vulnerabilities, inspection findings, and authorization conditions.</p></li><li><p>
Lead continuous monitoring activities, including evaluation of security posture, validation of control effectiveness, and tracking of security-relevant data.</p></li><li><p>
Develop, manage, and drive closure of Plans of Action and Milestones (POA&amp;Ms) resulting from inspections, assessments, and continuous monitoring activities.</p></li><li><p>
Lead and oversee cybersecurity Change Control Boards (CCBs), evaluating proposed system changes for security impact, authorization implications, and alignment with RMF requirements.</p></li><li><p>
Execute or coordinate corrective and protective security actions resulting from inspections, continuous monitoring, or identified cybersecurity incidents.</p></li><li><p>
Engage with Program Managers to integrate cybersecurity requirements into program execution, schedules, and decision-making, and to address risk impacts to cost, scope, and mission delivery.</p></li></ul><p></p><p><b>
Qualifications YOU Must Have:
</b></p><ul><li><p>Typically requires a University Degree and minimum 8 years prior relevant experience or an Advanced Degree in a related field and minimum 5 years of experience.</p></li><li><p>
U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance.</p></li><li><p>
Active DOD Secret Security Clearance Day one.</p></li><li><p>
IAM Level III certification compliant with DoD 8570 / DoD 8140 (e.g., CISSP, CISM, GSLC).</p></li><li><p>
Experience performing ISSM responsibilities for classified or controlled information systems.</p></li><li><p>
Advanced knowledge of RMF and DoD system authorization processes.</p></li><li><p>
Experience executing authorization and continuous monitoring using JSIG and/or DAAG.</p></li><li><p>
Knowledge of cybersecurity regulations, contractual requirements, and DD Form 254 interpretation.</p></li><li><p>
Experience supporting inspections, assessments, and audit activities.</p></li><li><p>
Ability to independently assess risk and communicate cybersecurity status to leadership.</p></li><li><p>
Must be willing to travel domestically up to 20%, generally supporting other company facilities.</p></li></ul><p><b>
Qualifications We Prefer:</b></p><ul><li><p>
Master&rsquo;s degree in Cybersecurity, Computer Science, or a related field.
</p></li><li><p>Experience as the primary ISSM for SAP and/or DoD collateral systems.
</p></li><li><p>Experience owning ATOs and driving POA&amp;M closure.
</p></li><li><p>Experience mentoring ISSOs and providing technical oversight.
</p></li><li><p>Experience leading Change Control Boards (CCBs).
</p></li><li><p>Experience working with cross-functional teams and enterprise cybersecurity organizations.
</p></li></ul><p></p><p><b>What We Offer:</b></p><p></p><p>
Some of our competitive benefits packages include:</p><ul><li><p>
Medical, dental, and vision insurance.</p></li><li><p>
Three weeks of vacation for newly hired employees.</p></li><li><p>
Generous 401(k) plan that includes employer matching funds and separate. employer retirement contribution, including a Lifetime Income Strategy option.</p></li><li><p>
Tuition reimbursement program.</p></li><li><p>
Student Loan Repayment Program.</p></li><li><p>
Life insurance and disability coverage.</p></li><li><p>
Optional coverages you can buy pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal, ID theft protection.</p></li><li><p>
Birth, adoption, parental leave benefits.</p></li><li><p>
Ovia Health, fertility, and family planning.</p></li><li><p>
Adoption Assistance.
</p></li><li><p>Autism Benefit.</p></li><li><p>
Employee Assistance Plan, including up to 10 free counseling sessions.</p></li><li><p>
Healthy You Incentives, wellness rewards program.</p></li><li><p>
Doctor on Demand, virtual doctor visits.</p></li><li><p>
Bright Horizons, child, and elder care services.</p></li><li><p>
Teladoc Medical Experts, second opinion program.</p></li><li><p>
 And more!</p></li></ul><p></p><p>
Learn More &amp; Apply Now!</p><p></p><p>
Do you want to be a part of something bigger? A team whose impact stretches across the world, and even beyond? At Collins Aerospace, our Mission Systems team helps civilian, military and government customers complete their most complex missions &mdash; whatever and wherever they may be. Our customers depend on us for intelligent and secure communications, missionized systems for specialized aircraft and spacecraft and collaborative space solutions. By joining our team, you&rsquo;ll have your own critical part to play in ensuring our customer succeeds today while anticipating their needs for tomorrow. Are you up for the challenge? Join our mission today.</p><p></p><p><b>
WE ARE REDEFINING AEROSPACE.</b></p><p></p><ul><li>Please consider the following role type definitions as you apply for this role.</li></ul><p></p><p>
Onsite: Employees who are working in Onsite roles will work primarily onsite. This includes all production and maintenance employees, as they are essential to the development of our products.</p><p></p><p><i>
Regardless of your role type, collaboration and innovation are critical to our business and all employees will have access to digital tools so they can work with colleagues around the world &ndash; and access to Collins sites when their work requires in-person meetings.</i></p><p></p><p>
At Collins, the paths we pave together lead to limitless possibility. And the bonds we form &ndash; with our customers and with each other - propel us all higher, again and again.</p><p><br>
</p><p>Apply now and be part of the team that&rsquo;s redefining aerospace, every day.</p><p></p><p><b><i>
As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote.</i></b></p><p></p>
The salary range for this role is 118,300 USD - 224,900 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate&rsquo;s work experience, location, education/training, and key skills.<p></p>
Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.<p></p>
Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company&rsquo;s performance.<p></p>
This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.<p></p>
RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.<p></p><p><i>
RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans&rsquo; Readjustment Assistance Act.</i>
</p><p></p><p><b>Privacy Policy and Terms:</b></p><p>
Click on this link to read the Policy and Terms</p></div>

Information System Security Manager (ISSM) (Onsite)

Search 10000+ Information technology security manager jobs near you this March. New roles added regularly across leading industries. Apply today.