Information Systems Security Manager

Second Front Systems

. Own authorization status, risk posture, privacy compliance, and continuous monitoring health across an assigned system portfolio .

Posted 11/9/2026full-timeRemote • United StatesSeniorLead💰 $170,000 - $180,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in DoD cybersecurity and privacy compliance, with a strong focus on managing authorization packages and implementing NIST 800-53 Rev 5 controls. Proven ability to lead and mentor teams while ensuring adherence to federal regulations and risk management frameworks.

Highest-signal resume keywords

DoD Cybersecurity ExperienceNIST 800-53 Rev 5 ImplementationEMASS Authorization ManagementPrivacy Compliance ExpertiseActive U.S. Secret Security Clearance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk Management Framework (RMF)Authorization Package ManagementPrivacy Impact Assessments (PIAs)Privacy Threshold Analyses (PTAs)SORN DeterminationsNIST 800-37 RMFCloud Security ControlsContinuous MonitoringIncident Response ProceduresData Flow Synchronization

Soft Skills

LeadershipMentoringCommunication SkillsQuality ReviewTeam Collaboration

Tools & Technologies

EMASSGRC ToolsAWSKubernetesCI/CD

Certifications & Qualifications

DoD 8570/8140 IAM Level II CertificationCISSPCISMCASP+IAPP Privacy Certification

Industry Keywords

Federal Privacy RegulationsOMB Circular A-130OMB M-17-12DoDI 5400.11CNSSI 1253

Tech Stack

Tools & technologies

AWSCloudCyber SecurityKubernetes

About the role

Key responsibilities & impact

Own authorization status, risk posture, privacy compliance, and continuous monitoring health across an assigned system portfolio
Orchestrate concurrent RMF workflows in eMASS and other GRC tools from categorization through continuous monitoring
Direct and mentor ISSOs, assign work, review authorization packages for quality, and coach on security and privacy requirements
Govern privacy authorization across all systems, authoring PTAs, PIAs, SORN determinations, and implementing NIST 800-53 Rev 5 privacy controls and CNSSI 1253 overlays
Synchronize PII and CUI data flows with ISSEs and Solutions Architects
Assess residual security and privacy risk, make risk acceptance and POA&M recommendations, and escalate material risks to leadership and Authorizing Officials
Maintain incident and breach-response procedures aligned with OMB M-17-12 and DoD requirements
Establish privacy templates, training materials, and authorization workflows
Report privacy posture trends to leadership
Serve as primary government interface and authoritative voice on PII protection and authorization across the company’s DoD environment

Requirements

What you’ll need

7+ years of hands-on DoD cybersecurity, RMF authorization, or information assurance experience, with at least 3 years serving as ISSM, lead ISSO, or equivalent role accountable for multiple ATO packages
3+ years of direct federal or DoD privacy experience, including authoring PTAs and PIAs, making SORN determinations, and implementing NIST 800-53 Rev 5 privacy controls under the Privacy Act, OMB Circular A-130, OMB M-17-12, and DoDI 5400.11
Expert hands-on experience managing authorization packages in eMASS plus mastery of at least one additional GRC tool (Xacta, RegScale, or CSAM)
Demonstrated ability to direct, mentor, and quality-review the work of ISSOs or compliance staff, with proven track record managing multiple concurrent authorization efforts
Expert knowledge of NIST 800-53 (Rev 4 and 5), NIST 800-37 RMF, CNSSI 1253 including privacy overlays, and DoD-specific implementation guidance
Solid technical literacy in cloud environments (AWS, containers, Kubernetes, CI/CD) and ability to map cloud-native patterns to technical security and privacy controls
Active U.S. Secret security clearance
DoD 8570/8140 IAM Level II baseline certification (CISSP, CISM, or CASP+) or ability to obtain within 90 days
IAPP privacy certification (CIPP/G, CIPP/US, CIPM, or CIPT) or ability to obtain within 6 months
Strong written and verbal communication skills, including ability to brief Authorizing Officials, privacy officers, and senior leaders on risk, authorization status, and compliance posture
U.S. citizenship is required for this role
Candidates must reside in one of the approved hiring hubs: DC/Maryland/Virginia or Denver/Colorado Springs, CO

Benefits

Comp & perks

100% employer-paid medical, dental, and vision coverage for you and your dependents
401(k) with a 3% company contribution
Comprehensive wellness benefits, including a One Medical membership, mental health resources, family planning support, and more
Equity incentive plan
New hire technology and home office stipend
Annual professional development stipend
Flexible paid time off, plus all federal holidays
Generous parental leave
Flexible remote work opportunities
Employee referral bonus program
Potential eligibility for discretionary bonuses