Information Systems Security Manager (ISSM)

Zachary Piper Solutions is seeking an experienced Information Systems Security Manager (ISSM) to support cybersecurity, Risk Management Framework (RMF), and security authorization. This individual will oversee authorization activities, continuous monitoring, and privacy compliance across multiple systems, working closely with ISSO teams, government stakeholders, and engineering teams to maintain security and compliance within cloud-based environments.

This is a fully remote position; however, candidates must reside in the DMV (DC, Maryland, or Virginia) or Colorado Springs, CO area.

ISSM Responsibilities

• Oversee RMF, ATO, and continuous monitoring activities across multiple systems using eMASS and other GRC platforms.
• Lead and mentor ISSO teams while reviewing authorization packages, security documentation, and POA&Ms.
• Manage privacy compliance activities, including Privacy Threshold Analyses (PTAs), Privacy Impact Assessments (PIAs), and System of Records Notice (SORN) determinations.
• Identify and document PII/CUI data flows across cloud-native environments and ensure applicable privacy controls are implemented.
• Coordinate with Authorizing Officials, Security Control Assessors, and government stakeholders to communicate security posture, risks, and authorization readiness.

ISSM Qualifications

• 7+ years of experience in DoD cybersecurity, RMF, or Information Assurance.
• 3+ years of experience as an ISSM, Lead ISSO, or in a similar leadership role supporting multiple ATOs.
• 3+ years of experience supporting federal or DoD privacy compliance, including PTAs, PIAs, and SORN determinations.
• Experience with eMASS and at least one additional GRC platform, such as Xacta, RegScale, or CSAM.
• Knowledge of NIST 800-53 Rev. 4/5, NIST 800-37, CNSSI 1253, the Privacy Act, and DoD privacy requirements.
• Active Secret clearance, U.S. citizenship, and an IAM Level II certification (CISSP, CISM, or CASP+) or ability to obtain one within 90 days.

Preferred Qualifications

• Experience with AWS, cloud environments, containers, Kubernetes, and CI/CD pipelines.
• Familiarity with OMB Circular A-130, OMB M-17-12, and DoDI 5400.11.
• IAPP certification (CIPP/G, CIPP/US, CIPM, or CIPT) or ability to obtain one within six months.
• Experience coordinating with Authorizing Officials, Security Control Assessors, and DoD privacy officers.
• Experience developing security templates, processes, and continuous monitoring procedures.

ISSM Compensation and Benefits

• Salary Range: $170,000 - $180,000
• Fully paid health coverage, a 401(k) contribution, equity incentives, wellness resources, home office and professional development stipends, flexible PTO, federal holidays, parental leave, and referral bonuses.

Keywords: ISSM, Information Systems Security Manager, Information System Security Officer, ISSO, RMF, Risk Management Framework, DoD Cybersecurity, Information Assurance, Security Authorization, ATO, Authority to Operate, eMASS, Xacta, RegScale, CSAM, Continuous Monitoring, NIST 800-53, NIST 800-37, CNSSI 1253, Privacy Compliance, Privacy Act, Privacy Impact Assessment, PIA, Privacy Threshold Analysis, PTA, SORN, System of Records Notice, PII, CUI, POA&M, AWS GovCloud, AWS, Cloud Security, Kubernetes, CI/CD, DoD, Federal Government, Active Secret Clearance, CISSP, CISM, CASP+, CIPP, CIPM.

#LI-CG2

#LI-REMOTE