Information Systems Security Manager (ISSM)

Piper Companies; United States; Remote; USD 170,000 - 180,000; Full time

Benefits offered by this job

Fully paid health coverage

401(k) contribution

Equity incentives

Wellness resources

Home office stipend

Professional development stipend

Flexible PTO

Federal holidays

Parental leave

Referral bonuses

Job summary

Zachary Piper Solutions is seeking an experienced Information Systems Security Manager (ISSM) to oversee RMF, ATO, and continuous monitoring for cloud-based environments. You will work with ISSOs, government stakeholders, and engineering teams to maintain security and privacy compliance.

This fully remote role requires residence in the DMV area or Colorado Springs. A Secret clearance and IAM Level II certification (CISSP, CISM, or CASP+) are expected or obtainable within 90 days.

Qualifications

• 7+ years of DoD cybersecurity, RMF, or Information Assurance experience.
• 3+ years as an ISSM/Lead ISSO or similar leadership role.
• 3+ years supporting federal or DoD privacy compliance (PTAs, PIAs, SORN).
• Experience with eMASS and at least one other GRC platform (Xacta/RegScale/CSAM).

Responsibilities

• Oversee RMF, ATO, and continuous monitoring across multiple systems using eMASS and other GRC platforms.
• Lead and mentor ISSO teams, review authorization packages and POA&Ms.
• Manage privacy compliance activities including PTAs, PIAs, and SORN determinations.
• Identify PII/CUI data flows in cloud-native environments and ensure privacy controls are implemented.
• Coordinate with Authorizing Officials and government stakeholders to communicate security posture and readiness.

Skills

DoD cybersecurity

RMF

Information Assurance

ISSM leadership

Privacy compliance

GRC platforms

Education

Active Secret clearance

IAM Level II certification (CISSP/CISM/CASP+)

U.S. citizenship

Tools

eMASS

Xacta

RegScale

CSAM

AWS cloud

Job description

Zachary Piper Solutions is seeking an experienced Information Systems Security Manager (ISSM) to support cybersecurity, Risk Management Framework (RMF), and security authorization. This individual will oversee authorization activities, continuous monitoring, and privacy compliance across multiple systems, working closely with ISSO teams, government stakeholders, and engineering teams to maintain security and compliance within cloud-based environments.

This is a fully remote position; however, candidates must reside in the DMV (DC, Maryland, or Virginia) or Colorado Springs, CO area.

ISSM Responsibilities

• Oversee RMF, ATO, and continuous monitoring activities across multiple systems using eMASS and other GRC platforms.
• Lead and mentor ISSO teams while reviewing authorization packages, security documentation, and POA&Ms.
• Manage privacy compliance activities, including Privacy Threshold Analyses (PTAs), Privacy Impact Assessments (PIAs), and System of Records Notice (SORN) determinations.
• Identify and document PII/CUI data flows across cloud-native environments and ensure applicable privacy controls are implemented.
• Coordinate with Authorizing Officials, Security Control Assessors, and government stakeholders to communicate security posture, risks, and authorization readiness.

ISSM Qualifications

• 7+ years of experience in DoD cybersecurity, RMF, or Information Assurance.
• 3+ years of experience as an ISSM, Lead ISSO, or in a similar leadership role supporting multiple ATOs.
• 3+ years of experience supporting federal or DoD privacy compliance, including PTAs, PIAs, and SORN determinations.
• Experience with eMASS and at least one additional GRC platform, such as Xacta, RegScale, or CSAM.
• Knowledge of NIST 800-53 Rev. 4/5, NIST 800-37, CNSSI 1253, the Privacy Act, and DoD privacy requirements.
• Active Secret clearance, U.S. citizenship, and an IAM Level II certification (CISSP, CISM, or CASP+) or ability to obtain one within 90 days.

Preferred Qualifications

• Experience with AWS, cloud environments, containers, Kubernetes, and CI/CD pipelines.
• Familiarity with OMB Circular A-130, OMB M-17-12, and DoDI 5400.11.
• IAPP certification (CIPP/G, CIPP/US, CIPM, or CIPT) or ability to obtain one within six months.
• Experience coordinating with Authorizing Officials, Security Control Assessors, and DoD privacy officers.
• Experience developing security templates, processes, and continuous monitoring procedures.

ISSM Compensation and Benefits

• Salary Range: $170,000 - $180,000
• Fully paid health coverage, a 401(k) contribution, equity incentives, wellness resources, home office and professional development stipends, flexible PTO, federal holidays, parental leave, and referral bonuses.

Keywords: ISSM, Information Systems Security Manager, Information System Security Officer, ISSO, RMF, Risk Management Framework, DoD Cybersecurity, Information Assurance, Security Authorization, ATO, Authority to Operate, eMASS, Xacta, RegScale, CSAM, Continuous Monitoring, NIST 800-53, NIST 800-37, CNSSI 1253, Privacy Compliance, Privacy Act, Privacy Impact Assessment, PIA, Privacy Threshold Analysis, PTA, SORN, System of Records Notice, PII, CUI, POA&M, AWS GovCloud, AWS, Cloud Security, Kubernetes, CI/CD, DoD, Federal Government, Active Secret Clearance, CISSP, CISM, CASP+, CIPP, CIPM.

#LI-CG2

#LI-REMOTE