Information Systems Security Manager

Job Summary

To strengthen cybersecurity and authorization functions, the full-time remote Information Systems Security Manager will manage authorization status, risk posture, and privacy compliance across an assigned system portfolio while overseeing RMF workflows and directing ISSO teams.

Key responsibilities

• Own authorization status, risk posture, privacy compliance, and continuous monitoring health across the assigned system portfolio
• Orchestrate concurrent RMF workflows in eMASS and other GRC tools from categorization through continuous monitoring
• Direct and mentor ISSOs, review authorization packages for quality, and govern privacy authorization across all systems

Required qualifications

• 7+ years of DoD cybersecurity, RMF authorization, or information assurance experience, with at least 3 years as ISSM or equivalent
• 3+ years of federal or DoD privacy experience, including authoring PTAs and PIAs, and implementing NIST 800-53 Rev 5 privacy controls
• Expert experience managing authorization packages in eMASS and proficiency in at least one additional GRC tool
• Active U.S. Secret security clearance and DoD 8570/8140 IAM Level II baseline certification or ability to obtain within 90 days
• Strong technical literacy in cloud environments and ability to map cloud-native patterns to security and privacy controls