Information Systems Security Manager – Government

AT&T

Information Systems Security Manager supporting the Defense Information Systems Agency with IT services. Overseeing security compliance and managing various cybersecurity activities based in San Antonio, Texas.

Posted 5/8/2026full-timeSan Antonio • Texas • 🇺🇸 United StatesMid-LevelSenior💰 $125,000 - $140,000 per yearWebsite

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Support the Program Manager in execution of contractual compliance.
Develop and maintain Assessment & Authorization (A&A) artifacts, including Authority to Operate (ATO) packages (Interim ATOs, continuous ATOs)
Oversee adherence to NIST SP 800-53 controls and DoD Cloud Security Requirements Guide (SRG); ensure compliance with Security Technical Implementation Guides (STIGs) and cloud security policies.
Conduct continuous monitoring (log audits, vulnerability scans); track and drive remediation of open Plans of Action & Milestones (POA&M) related to identified security weaknesses.
Plan and execute Security Test & Evaluation (ST&E) activities; validate the platform’s security posture through penetration tests, STIG checks, and compliance assessments.
Compile and report weekly vulnerability status and compliance posture; coordinate with engineering and ops teams for timely patching and mitigation actions.
Participate in Change Control Boards (CCB) to assess security impacts; ensure any data breaches or incidents are reported and lead follow-up investigations in line with DoD cybersecurity incident handling requirements.
Develop and update the Cyber Threat Security Plan and other security policy documents; implement supply chain risk management measures consistent with program requirements.
Support the program’s CMMC Level 2 readiness, coordinating self-assessments or third-party audits; manage evidence collection and closure of any compliance gaps.

Requirements

What you’ll need

Experience supporting DoD or DISA IT service programs.
One or more of the following DODD 8570.01/8140 certifications: CISM, CISSP, CISSP-ISSMP, FITSP-M, GCIA, GCIH, GICSP, GSLC
Experience with continuous monitoring, eMASS, STIGs, and vulnerability management

Benefits

Comp & perks

Medical/Dental/Vision coverage
401(k) plan
Tuition reimbursement program
Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
Paid Parental Leave
Paid Caregiver Leave
Additional sick leave beyond what state and local law require may be available but is unprotected
Adoption Reimbursement
Disability Benefits (short term and long term)
Life and Accidental Death Insurance
Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
Employee Assistance Programs (EAP)
Extensive employee wellness programs
Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Assessment & Authorization (A&A)Authority to Operate (ATO)NIST SP 800-53Security Technical Implementation Guides (STIGs)continuous monitoringvulnerability managementSecurity Test & Evaluation (ST&E)penetration testingPlans of Action & Milestones (POA&M)supply chain risk management

Soft Skills

communicationcoordinationinvestigationreporting

Certifications

CISMCISSPCISSP-ISSMPFITSP-MGCIAGCIHGICSPGSLC