Information Systems Security Manager (ISSM) – ABQ

About the role

The Deloitte Cyber team is seeking an experienced Information Systems Security Manager (ISSM) to support a government client as a cybersecurity subject‑matter expert. You will provide technical advisory, systems security engineering, and risk‑management support across IT, OT, and enabling systems throughout acquisition lifecycles.

Key responsibilities

• Lead execution of the NIST Risk Management Framework (RMF), including security categorization, control implementation, assessment support, authorization package development, and continuous monitoring.
• Provide systems security engineering (SSE) support for IT, OT, enabling systems, and weapons‑acquisition programs.
• Advise Federal Program Managers and the federal ISSM/Authorizing Official on cybersecurity risks, compliance, remediation priorities, and risk‑management decisions.
• Coordinate with program offices, engineering teams, acquisition stakeholders, and external partners to align cybersecurity requirements with program activities.
• Oversee cybersecurity metrics, supply‑chain risk‑management activities, and program reporting to identify and address security issues.

Required profile

• 5+ years of experience performing cybersecurity, ISSM, NIST RMF, or systems security engineering activities for federal information systems.
• Current CISSP certification issued by ISC2.
• Ability to travel up to 25% and be legally authorized to work in the United States without sponsorship.
• Strong written and verbal communication, attention to detail, and ability to work independently or as part of a team.

Required skills

• NIST Risk Management Framework (RMF)
• Systems security engineering
• CISSP certification
• IT and OT security
• Supply‑chain risk‑management