Information Systems Security Manager
New
S
Second Front SystemsDefense cybersecurity
Candidates must reside in one of our approved hiring hubs: DC/Maryland/Virginia; Denver/Colorado Springs, COFull-TimeManager
SalaryThe base salary for this position will fall between $170,000 - $180,000. Your ultimate compensation will be determined by professional background, technical proficiency, seniority, and regional cost factors. Furthermore, this opportunity includes potential eligibility for equity awards and discretionary bonuses.
Apply NowOpens the employer's application page
Job Details
- Experience
- 7+ years of hands-on DoD cybersecurity, RMF authorization, or information assurance experience, with at least 3 years serving as ISSM, lead ISSO, or equivalent role accountable for multiple ATO packages; 3+ years of direct federal or DoD privacy experience.
- Required Skills
- AWS
Requirements
- Have 7+ years of hands-on DoD cybersecurity, RMF authorization, or information assurance experience.
- Have at least 3 years as an ISSM, lead ISSO, or equivalent role accountable for multiple ATO packages.
- Have 3+ years of direct federal or DoD privacy experience, including authoring PTAs and PIAs, making SORN determinations, and implementing privacy controls.
- Have hands-on experience managing authorization packages in eMASS and mastery of at least one additional GRC tool: Xacta, RegScale, or CSAM.
- Know NIST 800-53 Rev 4 and 5, NIST 800-37 RMF, CNSSI 1253 privacy overlays, and DoD implementation guidance.
- Have experience applying the Privacy Act, OMB Circular A-130, OMB M-17-12, and DoDI 5400.11.
- Be able to direct, mentor, and quality-review ISSOs or compliance staff and manage concurrent authorization efforts.
- Have technical literacy in cloud environments, including AWS, containers, Kubernetes, and CI/CD.
- Hold an active U.S. Secret security clearance.
- Hold a DoD 8570/8140 IAM Level II baseline certification (CISSP, CISM, or CASP+) or be able to obtain one within 90 days.
- Hold an IAPP privacy certification (CIPP/G, CIPP/US, CIPM, or CIPT) or be able to obtain one within 6 months.
- Be able to brief Authorizing Officials, privacy officers, and senior leaders on risk, authorization status, and compliance posture.
Responsibilities
- Own authorization status, risk posture, privacy compliance, and continuous monitoring across an assigned system portfolio.
- Orchestrate concurrent RMF workflows in eMASS and other GRC tools from categorization through continuous monitoring.
- Direct and mentor ISSOs, assign work, and quality-review authorization packages.
- Author PTAs, PIAs, and SORN determinations and implement NIST 800-53 Rev 5 privacy controls and CNSSI 1253 overlays.
- Coordinate PII and CUI data-flow documentation with ISSEs and Solutions Architects.
- Assess residual security and privacy risk, recommend risk acceptance and POA&M actions, and escalate material risks.
- Maintain incident and breach-response procedures aligned with OMB M-17-12 and DoD requirements.
- Establish privacy templates, training materials, and authorization workflows, and report privacy posture trends to leadership.
View Full Description & ApplyYou'll be redirected to the employer's site
