Information System Security Manager – ISSM

Modern Technology Solutions, Inc. (MTSI)

. Lead and manage the process for enabling authority to operate (ATO) on commercial systems contracted under DIU-led or supported efforts .

Posted 9/29/2026full-timeUnited StatesMid-LevelSenior💰 $140,000 - $170,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing Authority to Operate (ATO) processes and implementing Risk Management Framework (RMF) while maintaining compliance with security standards. Proficient in preparing security authorization packages and conducting continuous monitoring to ensure information system security.

Highest-signal resume keywords

Risk Management Framework (RMF)IAM Level II CredentialsCISSP CertificationInformation Security ExperienceSecurity Authorization Packages

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecurityRisk Management Framework (RMF)Security Authorization PackagesContinuous MonitoringRemedial ActionsSecurity Assessment Report (SAR)Plan of Action and Milestones (POA&M)Common Security Requirements DocumentationSUAS ExperienceDoD Manual 8140 Familiarity

Soft Skills

Excellent Written CommunicationExcellent Verbal CommunicationInnovative MindsetAbility to Work Remotely

Tools & Technologies

NIST SP 800-30NIST SP 800-53DoDI 8510.01

Certifications & Qualifications

IAM Level II CredentialsCISSP Certification

Industry Keywords

Authority to Operate (ATO)Commercial SystemsDIU-led EffortsSecret-level Government ClearanceU.S. Citizenship

About the role

Key responsibilities & impact

Lead and manage the process for enabling authority to operate (ATO) on commercial systems contracted under DIU-led or supported efforts
Assemble and submit security authorization packages to the Authorizing Official, including the security plan, security assessment report, POA&M, and inherited-control documentation
Support implementation of the Risk Management Framework (RMF)
Maintain awareness of service-level changes to internal Authority to Operate processes to facilitate reciprocity across the department
Identify organizational common security requirements and document them in the AO Determination Brief and continuous monitoring strategy
Conduct initial remedial actions based on findings and reassess remediated risks
Update the AO Determination Brief, SAR, and POA&M based on continuous monitoring results
Report information-system security status and control effectiveness to the Authorizing Official and other appropriate officials
Continuously monitor and maintain ATOs
Travel to DIU or customer facilities as required

Requirements

What you’ll need

Minimum 5 years of experience in information security or technology
Proficient working knowledge of risk management frameworks (RMF)
Current IAM level II credentials required
Must possess the ability to obtain IAM level III credentials
Ability to effectively work remotely
Innovative mindset
Excellent written and verbal communication skills
Ability to qualify for and maintain a Secret-level government clearance
U.S. Citizenship is required
Up to 20% travel may be required
CISSP certification preferred
Commercial-sector or startup experience desired
Experience with small, unmanned aircraft systems (sUAS) desired
Familiarity with DoDI 8510.01, NIST SP 800-30, NIST SP 800-53, and DoD Manual 8140 desired
Bachelor’s degree preferred

Benefits

Comp & perks

Full range of medical benefits
401(k) with 6% match and immediate vesting
Employee Stock Ownership Plan (ESOP)
Paid time off: 20 days per year and 10 holidays
Flexible schedules
Up to $10,000 annual education/training reimbursement
Semi-annual bonus opportunity
Life and disability insurance
Optional zero-deductible Blue Cross/Blue Shield health insurance plan
Career mentorship programs
100% employee-owned company