Information Systems Security Manager

Job Summary

To support a company focused on secure software delivery and cybersecurity compliance, the remote Information Systems Security Manager (ISSM) will lead authorization, privacy compliance, risk management, and continuous monitoring efforts across mission-critical systems, with occasional on-site meet-ups in Arlington, VA.

Key responsibilities

• Lead RMF authorization efforts, continuous monitoring activities, and risk management across multiple information systems
• Manage authorization packages using eMASS and other GRC platforms including Xacta, RegScale, and CSAM
• Author and maintain Privacy Threshold Analyses (PTAs), Privacy Impact Assessments (PIAs), and SORN determinations while implementing NIST 800-53 Rev 5 privacy controls

Required qualifications

• 7+ years of experience supporting DoD cybersecurity, RMF authorization, information assurance, or related security compliance programs
• 3+ years of experience serving as an ISSM, Lead ISSO, or equivalent role responsible for managing multiple ATO packages
• 3+ years of direct federal or DoD privacy experience including PTAs, PIAs, SORN determinations, and privacy compliance activities
• Expert-level experience with eMASS and at least one additional GRC platform including Xacta, RegScale, or CSAM
• Active Secret Security Clearance