ISSM & Privacy Lead – RMF/DoD, Remote

Second Front Systems; United States; Remote; USD 170,000 - 180,000; Full time

Benefits offered by this job

Competitive salary

Employer-paid medical/dental/vision

401(k) with company contribution

Wellness benefits and One Medical

Equity incentive plan

Home office stipend

Professional development stipend

Flexible paid time off + federalHol

Parental leave

Flexible remote work opportunities

Employee referral bonus

Job summary

Second Front Systems is seeking an Information Systems Security Manager (ISSM) + Privacy to strengthen our cybersecurity and authorization functions for a defense software platform. You will own RMF authorization, risk posture, privacy compliance, and monitoring across a portfolio.

The role requires DoD RMF expertise, privacy controls, and the ability to lead ISSO teams, author PTAs and PIAs, map PII/CUI flows, and brief senior leaders. Candidates must reside in approved hubs; U.S.

Qualifications

• 7+ years of hands-on DoD cybersecurity, RMF authorization, or information assurance experience, including ISSM/lead ISSO roles.
• 3+ years of federal or DoD privacy experience, including PTAs and PIAs.
• Experience managing authorization packages in eMASS and at least one other GRC tool (Xacta/RegScale/CSAM).
• Ability to direct, mentor, and quality-review ISSOs and compliance staff.
• Strong knowledge of NIST 800-53 Rev 4/5, RMF, CNSSI 1253 privacy overlays, and DoD guidance.
• Cloud literacy (AWS, containers, Kubernetes, CI/CD) and mapping to security/privacy controls.
• Active U.S. Secret clearance; DoD IAM 8570/8140 Level II and privacy certifications or ability to obtain.
• Excellent communication to briefing leaders on risk and compliance.

Responsibilities

• Own authorization status, risk posture, privacy compliance, and continuous monitoring health across a system portfolio.
• Orchestrate RMF workflows in eMASS and other GRC tools from categorization to continuous monitoring.
• Direct and mentor ISSOs, review packages for quality, and coach on security and privacy requirements.
• Govern privacy authorization, drafting PTAs, PIAs, SORN determinations, and implement privacy controls.
• Map PII/CUI data flows with ISSEs to ensure documentation in authorization packages.
• Assess residual risk and make risk acceptance and POA&M recommendations to leadership.
• Maintain breach response procedures aligned with DoD requirements.
• Create repeatable privacy templates, training materials, and workflows for the team.

Skills

DoD cybersecurity

RMF authorization

information assurance

privacy compliance

leadership

communication

Tools

eMASS

Xacta

RegScale

CSAM

Job description

Second Front Systems is seeking an Information Systems Security Manager (ISSM) + Privacy to strengthen our cybersecurity and authorization functions for a defense software platform. You will own RMF authorization, risk posture, privacy compliance, and monitoring across a portfolio.

The role requires DoD RMF expertise, privacy controls, and the ability to lead ISSO teams, author PTAs and PIAs, map PII/CUI flows, and brief senior leaders. Candidates must reside in approved hubs; U.S.