Information Systems Security Manager

Job Summary

To support a company focused on secure software delivery and cybersecurity compliance, the remote Information Systems Security Manager (ISSM) will lead RMF authorization efforts, manage risk management activities, and mentor ISSOs across mission-critical systems while requiring monthly on-site meet-ups in Arlington, VA.

Key responsibilities

• Lead RMF authorization efforts, continuous monitoring activities, and risk management across multiple information systems
• Manage authorization packages using eMASS and other GRC platforms, including Xacta and RegScale
• Author and maintain Privacy Threshold Analyses (PTAs) and Privacy Impact Assessments (PIAs), implementing NIST 800-53 Rev 5 privacy controls

Required qualifications

• 7+ years of experience in DoD cybersecurity, RMF authorization, or related security compliance programs
• 3+ years as an ISSM, Lead ISSO, or equivalent role managing multiple ATO packages
• 3+ years of federal or DoD privacy experience, including PTAs, PIAs, and privacy compliance activities
• Expert-level experience with eMASS and at least one additional GRC platform
• Active Secret Security Clearance and IAT III Certification