Information Systems Security Manager

Responsibilities

• We're a small team wearing many hats, and you'd have a wide variety of responsibilities that include:
• Serve as the senior security authority for all program information systems, providing oversight to ISSOs and security staff
• Lead and manage the Risk Management Framework (RMF) process across multiple systems, ensuring ATOs are achieved and maintained in compliance with ICD 503 and NIST standards
• Develop, implement, and enforce information security policies, procedures, and standards tailored to IC operational environments
• Advise program leadership and the Authorizing Official (AO) on cybersecurity risks, mitigation strategies, and residual risk acceptance
• Oversee continuous monitoring programs, security control assessments, and vulnerability management activities
• Lead incident response, forensic investigations, and after-action reporting for security events affecting classified systems
• Manage and mentor ISSO personnel, establishing clear responsibilities and security workflows
• Coordinate with IC and DoW security stakeholders, including IGs, inspectors, and oversight bodies
• Ensure security architecture and engineering decisions align with mission requirements and applicable directives (ICD 503, CNSSI 1253, NIST SP 800-53)
• Evaluate emerging threats and drive proactive security improvements across AI/ML and data platforms
• Support audits, inspections, and reviews by government oversight authorities
• Important Skills
• 7-10 years of progressive cybersecurity experience, with a minimum of 3 years in an ISSM or senior security leadership role within IC or DoW environments
• Active TS/SCI required; must be able to obtain a Polygraph.
• Deep expertise in NIST RMF, ICD 503, CNSSI 1253, and IC/DoW security policy frameworks
• Demonstrated experience achieving and maintaining ATOs for complex, multi-system programs in classified environments
• Strong background in security architecture, risk management, and incident response within JWICS or similar classified networks
• Experience leading and mentoring security teams in a fast-paced, mission-driven environment
• Professional certifications required: CISSP; CISM, CAP, or CASP+ strongly preferred
• DoW 8570/8140 IAM Level III compliance required

Requirements

• Experience with AI/ML system security considerations
• AWS GovCloud or Azure Government security experience
• Military Intelligence or IC experience

Benefits

Additional Information

We are seeking an Information Systems Security Manager to provide senior-level cybersecurity leadership and oversight across all information systems supporting the program, serving as the authoritative subject matter expert on security policy, risk management, and compliance within the Intelligence Community. Spear AI is a growing defense contracting company dedicated to delivering cutting-edge solutions that support our nation's security. As we expand, we're building a culture where innovation meets mission-critical work. We operate with a flat organizational structure that empowers every team member to make an impact, collaborate directly with leadership, and contribute to projects that matter. Whether you're joining our Hardware, Software, or Services division, you'll work alongside talented professionals who are committed to excellence and advancing the capabilities that keep our nation safe and secure. Spear AI builds sonobuoy sensors that are deployed into the water and collect edge data. We also work with the U.S. Navy to collect and process their SONAR data. You'll have an opportunity to work on real-world projects that directly impact warfighter capabilities and mission success.

Your Match

How well this role fits your profile.

Company Intel

What employees say

Worked at Spear AI? Share your experience