Information System Security Manager (ISSM) - CMMC Level 2 (Azure Gov)

BETSOL is seeking a highly motivated and experienced Information System Security Manager (ISSM) to oversee and maintain the security posture of our information systems within our Microsoft Azure Government tenant, in accordance with the Cybersecurity Maturity Model Certification (CMMC) Level 2 requirements. The ISSM will be responsible for developing, implementing, and enforcing security policies, standards, and procedures to protect the confidentiality, integrity, and availability of our Controlled Unclassified Information (CUI) within the Azure Gov environment. This role requires a strong understanding of NIST SP 800-171, CMMC Level 2 framework, Azure Gov security capabilities, and best practices in information security. The ideal candidate will be a proactive problem-solver with excellent communication and organizational skills, capable of working independently and collaboratively within a dynamic environment. Responsibilities:Develop, implement, and maintain System Security Plan (SSP), Security Posture-related Plan of Action and Milestones (POA&Ms) and other security-related documentation in accordance with CMMC Level 2 requirements and NIST SP 800-171, specifically addressing the Azure Gov environment.Collaborate with IT owners to manage and monitor system access controls within Azure Gov, including user account management, permissions, and authentication methods (e.g., Azure Active Directory/Entra ID).Collaborate with IT owners and IT Security teams to integrate security requirements into system development and operational processes within the Azure Gov-based CMMC environment.Collaborate with IT owners to ensure the timely application of security patches and updates to all systems and applications to ensure ongoing compliance with CMMC Level 2 requirements within the Azure Gov environmentCollaborate with IT owners and IT Security teams to perform system auditing and security monitoring of Azure-based infrastructure and support investigations on information assurance-related security violations/incidents.Collaborate with IT owners to maintain records and documentation related to security configurations, policies, and procedures within Azure Gov.Maintain a strong understanding of evolving cybersecurity threats and vulnerabilities, and adapt security measures accordingly, with a focus on the Azure Gov ecosystem.