Information Systems Security Manager

This fully remote leadership role offers the opportunity to strengthen cybersecurity, information assurance, and privacy compliance across a portfolio of defense and government systems. As Information Systems Security Manager (ISSM), you will oversee Risk Management Framework (RMF) authorization activities, continuous monitoring, and privacy requirements for cloud-based environments supporting national security missions. You will lead and mentor Information Systems Security Officers (ISSOs), manage concurrent authorization processes, and ensure systems maintain valid Authorizations to Operate (ATOs). Working closely with government stakeholders, Authorizing Officials, security assessors, and technical teams, you will provide clear visibility into security risks and compliance status. Your expertise will help protect sensitive information, including Personally Identifiable Information (PII) and Controlled Unclassified Information (CUI), while supporting secure software deployment. This is a full-time opportunity for a decisive, mission-driven security professional who can combine technical depth, regulatory expertise, and effective team leadership.

• At least 7 years of hands-on experience in DoD cybersecurity, RMF authorization, or information assurance.

• At least 3 years in an ISSM, Lead ISSO, or equivalent leadership role with accountability for multiple ATO packages.

• At least 3 years of direct federal or DoD privacy experience, including preparing PTAs and PIAs, making SORN determinations, and implementing privacy controls.

• Advanced practical experience managing authorization packages in eMASS, along with strong proficiency in at least one additional GRC platform such as Xacta, RegScale, or CSAM.

• Expert knowledge of NIST SP 800-53 (Revisions 4 and 5), NIST SP 800-37 RMF, CNSSI 1253, privacy overlays, and relevant DoD implementation guidance.

• Strong understanding of federal privacy requirements, including the Privacy Act, OMB Circular A-130, OMB M-17-12, and DoDI 5400.11.

• Demonstrated ability to lead, mentor, and quality-review ISSOs or compliance professionals while managing several authorization initiatives simultaneously.

• Technical familiarity with cloud environments and modern software architectures, including AWS, containers, Kubernetes, and CI/CD pipelines, with the ability to translate cloud-native designs into appropriate security and privacy controls.

• Active U.S. Secret security clearance.

• DoD 8570/8140 IAM Level II baseline certification, such as CISSP, CISM, or CASP+, or the ability to obtain one within 90 days.

• IAPP privacy certification, such as CIPP/G, CIPP/US, CIPM, or CIPT, or the ability to obtain one within 6 months.

• Strong written and verbal communication skills, including the ability to brief Authorizing Officials, privacy officers, and senior executives on security risks, authorization status, and compliance.

• U.S. citizenship is required.

• Location requirement: Candidates must reside in one of the approved hiring hubs: Washington, D.C./Maryland/Virginia or Denver/Colorado Springs, Colorado.

• A proactive, solutions-oriented approach, with strong personal accountability, autonomy, teamwork, and a focus on measurable results.