ISSM (Remote)

Zachary Piper Solutions is seeking an Information Systems Security Manager (ISSM) to support a company focused on secure software delivery, cloud-based defense technology platforms, and cybersecurity compliance within regulated government environments. This position is Remote for candidates located in the DC/Maryland/Virginia regions. The Information Systems Security Manager (ISSM) will lead authorization, privacy compliance, risk management, and continuous monitoring efforts across a portfolio of mission-critical systems. This is an opportunity to drive cybersecurity and privacy strategy while supporting innovative technology solutions that enable secure operations across complex environments. This role will require on-site meet-ups in Arlington, VA one time per month.

Responsibilities for the Information Systems Security Manager (ISSM) include:

• Lead RMF authorization efforts, continuous monitoring activities, and risk management across multiple information systems.
• Manage authorization packages using eMASS and other GRC platforms including Xacta, RegScale, and CSAM.
• Direct and mentor ISSOs while conducting quality reviews of authorization documentation and compliance artifacts.
• Author and maintain Privacy Threshold Analyses (PTAs), Privacy Impact Assessments (PIAs), and SORN determinations while implementing NIST 800-53 Rev 5 privacy controls.
• Assess security and privacy risks, provide POA&M and risk acceptance recommendations, brief stakeholders, and maintain assessment readiness.

Required Qualifications for the Information Systems Security Manager (ISSM) include:

• 7+ years of experience supporting DoD cybersecurity, RMF authorization, information assurance, or related security compliance programs.
• 3+ years of experience serving as an ISSM, Lead ISSO, or equivalent role responsible for managing multiple ATO packages.
• 3+ years of direct federal or DoD privacy experience including PTAs, PIAs, SORN determinations, and privacy compliance activities.
• Expert-level experience with eMASS and at least one additional GRC platform including Xacta, RegScale, or CSAM.
• Deep knowledge of NIST 800-53 Rev 4/5, NIST 800-37 RMF, CNSSI 1253, privacy overlays, and DoD cybersecurity frameworks.
• Experience supporting cloud environments including AWS, Kubernetes, containers, and CI/CD pipelines.
• Strong leadership, technical writing, briefing, and stakeholder management skills.
• IAT III Certification
• Active Secret Security Clearance.

Compensation for the Information Systems Security Manager (ISSM) includes:

• Salary Range: $170,000 - $180,000 depending on experience
• Full Benefits Package: PTO, Paid Holidays, Medical, Dental, Vision, 401K, Tuition Reimbursement, Sick Leave as required by law, Equity Program, Professional Development Stipend, Home Office Stipend, Wellness Benefits, and Parental Leave

#LI-MZ1 #LI-REMOTE

SEO Keywords:  Information Systems Security Manager, ISSM, Information System Security Manager, Lead ISSO, RMF, Risk Management Framework, eMASS, Xacta, RegScale, CSAM, NIST 800-53, NIST 800-37, CNSSI 1253, Continuous Monitoring, ATO, Authority to Operate, Cybersecurity Compliance, Information Assurance, Security Controls, POA&M, Governance Risk and Compliance, GRC, Privacy Impact Assessment, PIA, Privacy Threshold Analysis, PTA, Privacy Compliance, Privacy Act, OMB A-130, DoD Cybersecurity, Secret Clearance, AWS Security, Kubernetes Security, Cloud Security, DevSecOps, CISM, CISSP, CASP+, CIPP, CIPM, CIPT, Security Management, Risk Assessment, Compliance Manager, Defense Technology, Remote Cybersecurity Jobs, Security Authorization, DoD RMF, Federal Cybersecurity, Security Operations, Privacy Officer, Information Security Leadership.