Information Systems Security Manager

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Information Systems Security Manager based in the United States. This fully remote leadership role offers the opportunity to strengthen cybersecurity, information assurance, and privacy compliance across a portfolio of defense and government systems. As Information Systems Security Manager (ISSM), you will oversee Risk Management Framework (RMF) authorization activities, continuous monitoring, and privacy requirements for cloud-based environments supporting national security missions. You will lead and mentor Information Systems Security Officers (ISSOs), manage concurrent authorization processes, and ensure systems maintain valid Authorizations to Operate (ATOs). Working closely with government stakeholders, Authorizing Officials, security assessors, and technical teams, you will provide clear visibility into security risks and compliance status. Your expertise will help protect sensitive information, including Personally Identifiable Information (PII) and Controlled Unclassified Information (CUI), while supporting secure software deployment. This is a full-time opportunity for a decisive, mission-driven security professional who can combine technical depth, regulatory expertise, and effective team leadership. \Own authorization status, security risk posture, privacy compliance, and continuous monitoring activities across an assigned portfolio of information systems. Manage multiple concurrent Risk Management Framework (RMF) workflows through eMASS and other Governance, Risk, and Compliance (GRC) platforms, including Xacta, RegScale, and CSAM, from system categorization through continuous monitoring. Lead privacy authorization activities across systems, including the preparation of Privacy Threshold Analyses (PTAs), Privacy Impact Assessments (PIAs), and System of Records Notice (SORN) determinations. Work with Information Systems Security Engineers (ISSEs) and Solutions Architects to identify, map, and document PII and CUI data flows across cloud-native systems and technical architectures. Evaluate security and privacy risks across the system portfolio, recommend risk acceptance decisions and Plans of Action and Milestones (POA&Ms), and escalate significant issues to leadership and Authorizing Officials. Maintain incident and data breach response procedures aligned with federal and DoD requirements, helping reduce exposure and support effective response. Establish standardized privacy templates, training materials, and repeatable authorization workflows to improve consistency and efficiency across the wider team. Report on authorization status, privacy compliance, risk posture, and emerging trends to senior leadership and government stakeholders. Serve as a primary government-facing security and privacy contact, supporting assessments, authorization decisions, and reciprocity discussions. At least 7 years of hands-on experience in DoD cybersecurity, RMF authorization, or information assurance. Advanced practical experience managing authorization packages in eMASS, along with strong proficiency in at least one additional GRC platform such as Xacta, RegScale, or CSAM. Expert knowledge of NIST SP 800-53 (Revisions 4 and 5), NIST SP 800-37 RMF, CNSSI 1253, privacy overlays, and relevant DoD implementation guidance. Demonstrated ability to lead, mentor, and quality-review ISSOs or compliance professionals while managing several authorization initiatives simultaneously. Technical familiarity with cloud environments and modern software architectures, including AWS, containers, Kubernetes, and CI/CD pipelines, with the ability to translate cloud-native designs into appropriate security and privacy controls. Secret security clearance. Strong written and verbal communication skills, including the ability to brief Authorizing Officials, privacy officers, and senior executives on security risks, authorization status, and compliance. Candidates must reside in one of the approved hiring hubs: A proactive, solutions-oriented approach, with strong personal accountability, autonomy, teamwork, and a focus on measurable results. Eligibility for equity awards and discretionary performance bonuses. 100% employer-paid medical, dental, and vision coverage for employees and their dependents. Comprehensive wellness benefits, including a One Medical membership, mental health resources, and family planning support. Equity incentive plan. New-hire technology package and home office stipend. Flexible paid time off and all federal holidays. Flexible remote work arrangements. Employee referral bonus program. \AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. The final decision and next steps (interviews, assessments) are managed by their internal team. Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR).