Information Systems Security Manager (ISSM)

Zachary Piper, LLC; Colorado Springs (CO); Hybrid; USD 170,000 - 180,000; Full time

Benefits offered by this job

Health coverage

401(k) plan

Equity incentives

Wellness resources

Home office stipend

Professional development

Job summary

Zachary Piper Solutions is seeking an experienced Information Systems Security Manager (ISSM) to lead RMF, risks, and security authorization for cloud environments. This fully remote role requires residing in the DMV area or Colorado Springs, CO, with strong collaboration across ISSO teams and government stakeholders.

Responsibilities include overseeing RMF, ATO, continuous monitoring, and privacy compliance, plus mentoring security teams and coordinating with authorities.

Qualifications

• 7+ years in DoD cybersecurity, RMF or Information Assurance.
• 3+ years in ISSM/ISSO leadership across multiple ATOs.
• 3+ years with federal privacy compliance (PTAs/PIAs/SORN).
• Experienced with eMASS and a GRC tool (Xacta/RegScale/CSAM).
• Secret clearance, US citizenship, IAM II cert or ability to obtain within 90 days.

Responsibilities

• Oversee RMF, ATO and continuous monitoring across systems.
• Lead ISSO teams; review authorization packages and POA&Ms.
• Manage privacy activities including PTAs, PIAs and SORN determinations.
• Document PII/CUI data flows and ensure privacy controls are applied.
• Coordinate with Officials and stakeholders on security posture and readiness.

Skills

RMF

Information Assurance

DoD cybersecurity

Leadership

Privacy compliance

eMASS usage

Tools

eMASS

Xacta

RegScale

CSAM

Job description

Zachary Piper Solutions is seeking an experienced Information Systems Security Manager (ISSM) to support cybersecurity, Risk Management Framework (RMF), and security authorization. This individual will oversee authorization activities, continuous monitoring, and privacy compliance across multiple systems, working closely with ISSO teams, government stakeholders, and engineering teams to maintain security and compliance within cloud-based environments.

This is a fully remote position; however, candidates must reside in the DMV (DC, Maryland, or Virginia) or Colorado Springs, CO area.

ISSM Responsibilities

• Oversee RMF, ATO, and continuous monitoring activities across multiple systems using eMASS and other GRC platforms.
• Lead and mentor ISSO teams while reviewing authorization packages, security documentation, and POA&Ms.
• Manage privacy compliance activities, including Privacy Threshold Analyses (PTAs), Privacy Impact Assessments (PIAs), and System of Records Notice (SORN) determinations.
• Identify and document PII/CUI data flows across cloud-native environments and ensure applicable privacy controls are implemented.
• Coordinate with Authorizing Officials, Security Control Assessors, and government stakeholders to communicate security posture, risks, and authorization readiness.

ISSM Qualifications

• 7+ years of experience in DoD cybersecurity, RMF, or Information Assurance.
• 3+ years of experience as an ISSM, Lead ISSO, or in a similar leadership role supporting multiple ATOs.
• 3+ years of experience supporting federal or DoD privacy compliance, including PTAs, PIAs, and SORN determinations.
• Experience with eMASS and at least one additional GRC platform, such as Xacta, RegScale, or CSAM.
• Knowledge of NIST 800-53 Rev. 4/5, NIST 800-37, CNSSI 1253, the Privacy Act, and DoD privacy requirements.
• Active Secret clearance, U.S. citizenship, and an IAM Level II certification (CISSP, CISM, or CASP+) or ability to obtain one within 90 days.

Preferred Qualifications

• Experience with AWS, cloud environments, containers, Kubernetes, and CI/CD pipelines.
• Familiarity with OMB Circular A-130, OMB M-17-12, and DoDI 5400.11.
• IAPP certification (CIPP/G, CIPP/US, CIPM, or CIPT) or ability to obtain one within six months.
• Experience coordinating with Authorizing Officials, Security Control Assessors, and DoD privacy officers.
• Experience developing security templates, processes, and continuous monitoring procedures.

ISSM Compensation and Benefits

• Salary Range: $170,000 - $180,000
• Fully paid health coverage, a 401(k) contribution, equity incentives, wellness resources, home office and professional development stipends, flexible PTO, federal holidays, parental leave, and referral bonuses.

Keywords: ISSM, Information Systems Security Manager, Information System Security Officer, ISSO, RMF, Risk Management Framework, DoD Cybersecurity, Information Assurance, Security Authorization, ATO, Authority to Operate, eMASS, Xacta, RegScale, CSAM, Continuous Monitoring, NIST 800-53, NIST 800-37, CNSSI 1253, Privacy Compliance, Privacy Act, Privacy Impact Assessment, PIA, Privacy Threshold Analysis, PTA, SORN, System of Records Notice, PII, CUI, POA&M, AWS GovCloud, AWS, Cloud Security, Kubernetes, CI/CD, DoD, Federal Government, Active Secret Clearance, CISSP, CISM, CASP+, CIPP, CIPM.

#LI-CG2

#LI-REMOTE