Information Systems Security Engineer / Manager at SG2 Recruiting
Arlington, VA
$332,800–$395,200
Jul 6, 2026
Arlington, VA
Jul 21, 2026
What this job asks for AI summary
A senior cybersecurity role at a defense technology firm, focused on building and running an enterprise governance, risk, and compliance program across a range of regulatory frameworks including CMMC, NIST 800-171, RMF, ISO 27001, and others. Day-to-day work spans security policy development, audit readiness, risk assessments, business continuity, and third-party vendor risk, with regular collaboration across engineering, IT, and executive leadership. Best suited to someone with deep GRC experience in DoD contractor or similarly regulated environments, including FOCI-mitigated organizations.
Senior level · 7+ years · Washington-Arlington-Alexandria, DC-VA-MD-WV · Secret clearance · Full-time
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $152,225 (middle half $125,286–$177,673).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (8)
The title is 'Information Systems Security Engineer / Manager' — a hybrid role spanning hands-on GRC/compliance work and program leadership. The day-to-day work (risk assessments, SSPs, POA&Ms, audit readiness, compliance frameworks) maps most closely to Information Security Analysts (15-1212); 15-1299 is noted as a runner-up given the engineering/manager framing.
Clearance: the JD hard-gates on U.S. Citizenship and the ability to obtain/maintain a Secret clearance. An active Secret clearance is listed under 'It's a Plus' (preferred), so the gate is set at Secret (obtainable).
ECPs (Electronic Communications Plans) appear in the required section alongside SSPs and POA&Ms but are a FOCI-specific artifact; captured under the SSPs skill for brevity since no standalone tool name is involved.
NIS2 appears in the narrative description of frameworks driven but is absent from the explicit 'Working knowledge of' required list — treated as preferred context rather than a hard gate.
The role requires monthly in-person presence at the Washington, DC Metro office; it is not fully remote.
No compensation figures are provided in the posting.
Professional certifications (CISSP, CISM, CISA, CEH, ITIL, CCNP, JNCIA, ISO Lead Auditor) are listed under the 'It's a Plus' section and are therefore preferred, not required.
Requires a Secret clearance — the cleared population is a small fraction of this occupation, so the real candidate pool is materially smaller than the estimate below, which does not model clearance.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.