Information Systems Security Manager

Insight Global; Lincoln (MA); On-site; USD 120,000 - 160,000; Full time

Job summary

Insight Global is seeking an ISSO/ISSM to lead RMF activities for DoD systems and manage accreditation packages. The role involves developing eMASS packages, supporting ATO efforts, and creating cybersecurity documentation, including SSPs and control artifacts.

The candidate will collaborate with engineers, system administrators, and government stakeholders to ensure ongoing compliance throughout the lifecycle, with a focus on DoD accreditation processes and security standards.

Qualifications

• Active Top Secret/SCI clearance is required.
• CompTIA Security+ certification required.

Responsibilities

• Lead RMF activities for classified DoD systems.
• Develop, maintain, and update eMASS packages.

Skills

RMF

eMASS

ATO packages

POA&M management

security documentation

Top Secret/SCI Clearance

CompTIA Security+

DoD RMF process

SSP creation

Job description

We are seeking a highly motivated ISSO/ISSM to support classified Department of Defense systems and lead cybersecurity compliance efforts throughout the system lifecycle. This individual will be responsible for managing the Risk Management Framework (RMF) process, maintaining accreditation packages, and ensuring systems remain compliant with DoD cybersecurity requirements.

The ideal candidate will have strong hands-on experience with RMF, eMASS, ATO packages, POA&M management, and security documentation, along with the ability to work closely with engineers, system administrators, and government stakeholders to maintain accreditation and operational readiness.

Key Responsibilities

• Lead and manage RMF activities for classified information systems
• Develop, maintain, and update eMASS packages
• Own or heavily support Authority to Operate (ATO) accreditation efforts
• Create, review, and maintain cybersecurity documentation including SSPs and security control artifacts
• Assess, document, and validate NIST and DoD security controls
• Track and manage Plans of Action & Milestones (POA&Ms)
• Support cybersecurity audits, inspections, assessments, and compliance reviews
• Partner with system administrators, engineers, and program teams to remediate security findings and close compliance gaps
• Ensure systems maintain compliance throughout acquisition, development, deployment, and sustainment phases
• Communicate accreditation status, risks, and remediation strategies to government customers and leadership

Required Qualifications

• Active Top Secret/SCI Clearance
• Current CompTIA Security+ certification
• 3-10 years of DoD Cybersecurity, Information Assurance, or RMF experience
• Extensive hands-on experience with the Risk Management Framework (RMF)
• Strong working knowledge of eMASS
• Experience managing and tracking POA&Ms
• Experience creating and maintaining SSPs, security controls, and compliance documentation
• ISSM experience OR strong ISSO experience with ownership of RMF activities
• Strong understanding of the DoD accreditation and authorization process
• Ability to work collaboratively with engineers, administrators, and government stakeholders

Preferred Qualifications

• Experience supporting highly classified environments
• Familiarity with NIST 800-53 security controls
• Experience supporting cybersecurity inspections and command-level assessments
• Additional DoD 8570/8140 certifications
• Strong written and verbal communication skills

What Makes Someone Successful in This Role?

• Can independently manage RMF packages from start to finish
• Understands how to navigate eMASS and maintain compliant authorization packages
• Comfortable leading ATO efforts and interacting with government Authorizing Officials
• Able to balance technical cybersecurity requirements with operational mission needs
• Proactive in identifying risks, driving remediation efforts, and maintaining compliance