Information Systems Security Manager

Job Summary

Leading security authorization and privacy compliance for a federal defense cybersecurity program, the remote Information Systems Security Manager will manage multiple authorization packages, guide Information Systems Security Officers (ISSOs), and assist engineering teams in implementing security and privacy controls within AWS GovCloud.

Key Responsibilities

• Lead Risk Management Framework (RMF) activities and manage Authority to Operate (ATO) and Interim Authority to Test (IATT) packages
• Direct continuous monitoring, control assessments, and vulnerability remediation while briefing stakeholders on authorization status
• Mentor ISSOs, coordinate authorization decisions, and conduct federal privacy reviews, including Privacy Threshold Analyses and Privacy Impact Assessments

Required Qualifications

• 7+ years of experience in federal or DoD cybersecurity and information assurance
• 3+ years as an ISSM or Lead ISSO with experience overseeing multiple ATO packages
• Advanced experience with eMASS and proficiency in an additional GRC platform
• 3+ years of federal or DoD privacy compliance experience, including conducting PTAs and PIAs
• DoD 8570/8140 IAM Level II certification or the ability to obtain one within 90 days