Information Security Manager III

Castalia Systems

Information Systems Security Specialist managing cyber risk and incident responses for federal clients. Working with a team on security management and assurance frameworks in Arlington, VA.

Posted 7/11/2026full-timeArlington • Virginia • 🇺🇸 United StatesSeniorLead💰 $102,000 - $108,000 per yearWebsite

Tech Stack

Tools & technologies

AWSCyber SecurityLinux

About the role

Key responsibilities & impact

Work as part of a team of Information Assurance professionals to manage the full Risk Management Framework lifecycle for Information Technology systems
Assisting technical/management leadership on major tasks or technology assignments
Establishing goals and plans that meet project objectives
Assisting in direction and control activities, having overall responsibility for security management, methods, and staffing to ensure that technical requirements are met
Participating in client negotiations and interfacing with senior management
Supporting decision making and domain knowledge that may have a critical impact on overall project implementation
Providing support to plan, coordinate, and implement a cybersecurity labs information security
Providing support for facilitating and helping the lab identify its current security infrastructure and define future programs, design and implementation of security related to lab systems
Assisting the efforts of security staff to design, develop, engineer and implement solutions to security requirements
Implementing and development of the DHS IT security standard
Gathering and organizing technical information about the labs mission goals and needs, existing security products, and ongoing programs
Performing risk analyses which also includes risk assessment
Planning and leading major technology assignments
Evaluating performance results and recommending major changes affecting short-term project growth and success
Functioning as a cyber technical expert across multiple project assignments
Working closely with ISSM and CISO to respond to Data Calls and satisfy requirements of ATOs

Requirements

What you’ll need

BS Information Management, Cybersecurity, Computer Science or related degree, or High School Diploma and 7+ years of information security management experience.
5+ years of directly relevant experience in information security management
Hands-on experience with Linux operating systems or Amazon Web Services
Experience supporting the NIST Risk Management Framework (RMF) process and contributing to a full ATO effort from initiation through authorization, including development of security documentation, control implementation statements, supporting assessment (audit) activities, and performing full POA&M management
Beginning to end Knowledge of RMF and Assessment and Authorization (A&A) documentation to include SSP, Contingency, Incident & Configuration Management planning and execution
Experience working on multiple complex assignments which are broad in nature, requiring originality and innovation in determining how to accomplish tasks
Ability to apply comprehensive knowledge across key tasks and high impact assignments
Knowledge of Computer Network Defense (CND) policies, procedures & regulations
Knowledge of defense-in-depth principles and network security architecture
Knowledge of ATO requirements and strong experience with POAMs.
Knowledge and experience with full range of Microsoft Office products (Word, Excel, PowerPoint, and Visio)
Knowledge of boundary protection and network segmentation
Knowledge of authentication and access management techniques
Experience with implementing and assessing security controls for hardware, software, and network deployments.

Benefits

Comp & perks

Medical, dental, and vision coverage
401k matching
Generous PTO
Paid holidays
Professional training opportunities
Pet insurance

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Risk AssessmentSecurity Documentation DevelopmentCybersecurity Lab ImplementationData Calls ResponsePOA&M ManagementNetwork Security ArchitectureAuthentication TechniquesBoundary ProtectionSecurity Control AssessmentIncident Management Planning

Soft Skills

Team CollaborationClient NegotiationLeadershipDecision MakingCommunication