Janus International Group Logo

Janus International Group

Information Systems Security Manager

Posted 5 Days Ago
Be an Early Applicant
In-Office
Lexington, MA, USA
150K-170K Annually
Mid level
In-Office
Lexington, MA, USA
150K-170K Annually
Mid level
Owns the security posture and compliance of corporate and CUI systems. Maintains security documentation, implements NIST, RMF, and CMMC controls, supports DCSA reviews and audits, monitors Microsoft 365 and AWS environments, manages identity and endpoint security, coordinates user training, and oversees secure development scanning. The role also assesses Windows, Active Directory, and Linux hardening, supports access management and patching, and reports cybersecurity risks to leadership.
The summary above was generated by AI

Candidates must have an active Secret clearance and verify, before applying, that you meet the minimum requirements of the position.

Target salary range: $150k - $170k. The estimate displayed represents the typical salary range for this position based on experience and other factors.

Information Systems Security Manager

Department: Information Management

Clearance Requirement: Secret

Reports To: Chief Information Officer

Position Summary

The ISSM owns the security posture of JANUS corporate and CUI systems. You keep us compliant with RMF, NIST SP 800-53, NIST SP 800-171, and CMMC Level 2. You also bring hands-on technical depth across Microsoft 365, AWS, Windows, Linux, and Active Directory.

This is a hybrid role that combines cybersecurity compliance oversight with system security and user training coordination.

The Cybersecurity Compliance Administrator will work closely with DCSA, the Facility Security Officer (FSO), external MSP, MSSP, service providers, and organizational leadership to ensure corporate systems remain secure and compliant.

Key Responsibilities
  • Maintain and update cybersecurity documentation, including SSPs, POA&Ms, policies, procedures, and user access records.
  • Implement and monitor security controls for NIST SP 800-171, NIST SP 800-53, and CMMC Level 2. Run continuous monitoring, collect evidence, and report risk to leadership.
  • Monitor and analyze Microsoft 365, including GCC High: Exchange Online, Teams, SharePoint, and Entra ID. Review Conditional Access, MFA, privileged roles, and Defender, Purview, and Intune findings.
  • Lead preparation for CMMC assessments, DCSA reviews, and audits. Work with DCSA, the FSO, service providers, and leadership.
  • Contribute to security audits, assessments, and continuous monitoring processes.
  • Coordinate and deliver end-user cybersecurity and IT training (e.g., phishing awareness, acceptable use).
  • Support onboarding/offboarding and system access management.
  • Assist with patch management, system hardening, and endpoint configurations.
  • Own the secure development program. Run SAST, DAST, and dependency scanning tools (such as Snyk, SonarQube, OWASP ZAP, or Burp Suite) in CI/CD pipelines, and triage findings with developers.
  • Assess AWS security (commercial and GovCloud): IAM, Security Hub, GuardDuty, CloudTrail, and AWS Config. Confirm that cloud services meet FedRAMP Moderate (or equivalent) before they hold CUI.
  • Assess Windows and Active Directory security: STIG and CIS baselines, Group Policy, privileged groups, tiered administration, service accounts, LAPS, BitLocker, and application control. Monitor for identity attacks.
  • Assess Linux security (RHEL and similar): STIG and CIS hardening, such as FIPS, LUKS, application and privilege access control, and logging (auditd). Run and review SCAP scans and remediating when necessary.
Required Qualifications
  • U.S. Citizenship and ability to obtain or maintain a DoD Security Clearance
  • 3+ years of experience in IT systems, cybersecurity, or compliance support
  • Knowledge of NIST SP 800-171, CMMC Level 2, and RMF standards
  • Prior interaction with DCSA and knowledge of FSO/ISSM support requirements
  • Microsoft 365 administration experience (Entra ID, Teams, SharePoint, Exchange)
  • Security+ or equivalent IAM Level I certification (per DoD 8570)
  • Excellent communication, documentation, and organizational skills
Preferred Qualifications
  • IAM Level II Certification (CISSP, CISM, CCNA Sec, etc.)
  • Experience supporting DoD contractors or working in a cleared facility environment
  • Experience with virtualization technologies like VMWare vSphere, Hyper-V, and KVM/QEMU
  • Experience with containerized compute solutions like Docker, Podman, and Kubernetes
  • Familiarity with Microsoft Intune, Defender, and compliance features
  • Experience developing or managing cybersecurity training programs
  • Experience supporting developers using Python and C for development, and Terraform and Ansible for deployment

JANUS strives to provide opportunities for career growth through training and development. We also offer an attractive comprehensive benefit package to include health and welfare plans and financial products. As part of a total rewards program, employees can benefit from our referral bonus program, and other various employee awards. JANUS Research Group takes pride in our benefit package and rewards program which has earned us the certification of a Great Place to Work™

JANUS Research Group provides reasonable accommodation so that qualified applicants with a disability may participate in the selection process. Please advise us of any accommodations you request to express interest in a position by e-mailing: Judy Pagac, Chief Human Resources Officer at [email protected] or calling (706) 364-9100. Please state your request for assistance in your message. Only reasonable accommodation requests related to applying for a specific position within JANUS Research Group will be reviewed at the e-mail address and phone number supplied. Thank you for considering a career with JANUS Research Group.

JANUS Research Group participates in the Electronic Employment Verification Program. Please click the E-Verify link below for more information.

E-Verify

JANUS Research Group is an equal opportunity/ affirmative action employer. It is company policy to provide equal opportunity in all areas of employment practice without regard to race, color, religion, sex, sexual orientation, national origin, age, marital status, veteran status, citizenship, or disability.

This contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a) and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on their race, color, religion, sex, or national origin. Moreover, these regulations require that covered prime contractors and subcontractors take affirmative action to employ and advance in employment qualified individuals without regard to race, color, religion, sex, national origin, protected veteran status or disability.

Similar Jobs

5 Days Ago
In-Office
01730, Bedford, MA, USA
123K-147K Annually
Mid level
123K-147K Annually
Mid level
Aerospace
Advise DoD customers on information system security across SAP, SCI, and Collateral environments. Develop and oversee RMF and JSIG authorization processes, conduct risk assessments, review security documentation, manage incidents and vulnerabilities, maintain authorization boundaries, and ensure configuration control and security testing. Lead security training, recovery planning, inspections, and compliance activities while mentoring cybersecurity and IT personnel.
Top Skills: Assured File Transfers (Aft)Configuration ManagementIntrusion Detection And Monitoring ToolsJoint Special Access Program Implementation Guide (Jsig)Risk Management Framework (Rmf)Sensitive Compartmented Information (Sci)Special Access Programs (Sap)
5 Days Ago
In-Office
Lexington, MA, USA
150K-170K Annually
Mid level
150K-170K Annually
Mid level
Information Technology • Professional Services • Cybersecurity • Defense
Owns the security posture and compliance of corporate and CUI systems. Maintains security documentation, implements NIST, RMF, and CMMC controls, monitors Microsoft 365, AWS, Windows, Linux, and Active Directory environments, and leads audits, DCSA reviews, and CMMC assessments. Coordinates cybersecurity training, access management, patching, hardening, secure development scanning, cloud security assessments, and remediation activities while collaborating with leadership, the FSO, DCSA, and service providers.
Top Skills: Active DirectoryAmazon GuarddutyAnsibleAuditdAWSAws CloudtrailAws ConfigAws GovcloudAws Security HubBitlockerBurp SuiteCCi/CdCis BenchmarksCmmc Level 2DockerExchange OnlineFedramp ModerateFipsGcc HighGroup PolicyHyper-VIamKubernetesKvm/QemuLapsLinuxLuksMicrosoft 365Microsoft DefenderMicrosoft Entra IdMicrosoft IntuneMicrosoft PurviewMicrosoft TeamsNist Sp 800-171Nist Sp 800-53Owasp ZapPodmanPythonRhelRmfScapSharepointSnykSonarqubeStigTerraformVmware VsphereWindows
10 Days Ago
In-Office
01730, Bedford, MA, USA
138K-165K Annually
Mid level
138K-165K Annually
Mid level
Aerospace
Oversee information systems security for DoD Collateral, SCI, and SAP environments. Responsibilities include RMF and JSIG authorization support, risk assessments, security documentation, incident response, configuration management, vulnerability evaluation, security training, system recovery, inspections, and authorization boundary monitoring. The ISSM advises government customers, leads cybersecurity personnel, and ensures compliance with security requirements throughout the system lifecycle.
Top Skills: Assured File Transfer (Aft)Configuration ManagementJoint Special Access Program Implementation Guide (Jsig)Network SecurityRisk Management Framework (Rmf)Sensitive Compartmented Information (Sci)Special Access Programs (Sap)

What you need to know about the Boston Tech Scene

Boston is a powerhouse for technology innovation thanks to world-class research universities like MIT and Harvard and a robust pipeline of venture capital investment. Host to the first telephone call and one of the first general-purpose computers ever put into use, Boston is now a hub for biotechnology, robotics and artificial intelligence — though it’s also home to several B2B software giants. So it’s no surprise that the city consistently ranks among the greatest startup ecosystems in the world.

Key Facts About Boston Tech

  • Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
  • Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
  • Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
  • Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
  • Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account