Information Systems Security Manager

Zachary Piper Solutions is seeking an Information Systems Security Manager (ISSM) to lead security authorization and privacy compliance for a federal defense cybersecurity program. This position is remote and requires an active Secret security clearance. You’ll manage multiple authorization packages, guide Information Systems Security Officers (ISSOs), and help engineering teams build security and privacy controls into systems hosted in AWS GovCloud.

Responsibilities for the ISSM include:

• Lead Risk Management Framework (RMF) activities across multiple systems and manage concurrent Authority to Operate (ATO) and Interim Authority to Test (IATT) packages from development through sustainment.
• Maintain authorization records in eMASS and a secondary governance, risk, and compliance (GRC) platform. Review System Security Plans (SSPs), Security Assessment Reports (SARs), Security Control Traceability Matrices (SCTMs), and Plans of Action and Milestones (POA&Ms).
• Direct continuous monitoring, control assessments, and vulnerability remediation. Track residual risks and brief government stakeholders on authorization status and mitigation options.
• Mentor ISSOs and review their work for accuracy and consistency. Coordinate authorization and risk acceptance decisions with Authorizing Officials (AOs), Security Control Assessors (SCAs), system owners, and engineering teams.
• Lead federal privacy reviews, including Privacy Threshold Analyses (PTAs), Privacy Impact Assessments (PIAs), and System of Records Notice (SORN) determinations. Incorporate privacy controls into system designs, authorization packages, and monitoring plans.
• Support AWS GovCloud authorizations and assess the security and privacy impact of cloud deployments, software releases, and significant system changes.
• Contribute to cybersecurity incident response and privacy breach response activities.

Required Qualifications for the ISSM include:

• 7+ years of hands-on experience in federal or DoD cybersecurity, information assurance, and RMF.
• 3+ years as an ISSM or Lead ISSO with ownership of multiple ATO packages, including experience overseeing and reviewing the work of security staff.
• Advanced hands-on experience with eMASS and working proficiency in at least one additional GRC platform, such as Xacta, RegScale, or CSAM.
• 3+ years of direct federal or DoD privacy compliance experience, including conducting PTAs and PIAs, making SORN determinations, and applying Privacy Act requirements.
• Working knowledge of OMB A-130, OMB M-17-12, DoDI 5400.11, NIST SP 800-53 Rev. 5 privacy controls, and CNSSI 1253 privacy overlays.
• Experience with continuous monitoring, POA&M management, residual risk analysis, and vulnerability remediation.
• DoD 8570/8140 IAM Level II certification, such as CISSP, CISM, or CASP+, or the ability to obtain a qualifying certification within 90 days.
• IAPP certification (CIPP/G, CIPP/US, CIPM, or CIPT), or the ability to obtain one within six months.
• Strong written and verbal communication skills, including experience briefing government stakeholders and senior leadership on security and privacy risks.
• Active Secret security clearance.

Preferred Qualifications for the ISSM include:

• Experience preparing AWS GovCloud authorization packages and assessing AWS security services and controls.
• Experience supporting Kubernetes, containers, microservices, or DevSecOps and CI/CD environments.
• Experience incorporating privacy controls into cloud architecture and deployment processes.
• Familiarity with DoD identity, credential, and access management (ICAM), Zero Trust, or cloud security engineering.
• Experience supporting security incidents, privacy breach response, or significant change assessments.
• Experience working directly with federal privacy offices or establishing authorization processes across multiple systems.

Compensation for the ISSM includes:

• Salary Range: $170,000–$180,000 per year, depending on experience.
• Benefits: 10% annual bonus, equity opportunities, 100% employer-paid medical benefits, unlimited PTO, paid federal holidays, and a home office stipend.

This job opens for applications on 11/12/2026. Applications for this job will be accepted for at least 30 days from the posting date.

#LI-MR1

#LI-REMOTE

Keywords: Information Systems Security Manager, ISSM, Lead ISSO, Information Assurance Manager, Federal Cybersecurity, DoD Cybersecurity, Federal Privacy Compliance, DoD Privacy, Privacy Act, Privacy Engineering, Active Secret Clearance, Cleared ISSM, Remote ISSM, Risk Management Framework, RMF, Assessment and Authorization, A&A, Authority to Operate, ATO Package Management, Interim Authority to Test, IATT, eMASS, Xacta, RegScale, CSAM, Governance Risk and Compliance, GRC, Continuous Monitoring, ConMon, POA&M, SSP, SAR, SCTM, Residual Risk, Security Impact Analysis, NIST SP 800-53 Rev. 5, CNSSI 1253, Privacy Controls, Privacy Threshold Analysis, PTA, Privacy Impact Assessment, PIA, System of Records Notice, SORN, OMB A-130, OMB M-17-12, DoDI 5400.11, AWS GovCloud, Cloud Security Authorization, Cloud RMF, Kubernetes, DevSecOps, CI/CD, Privacy Breach Response, DoD 8140, IAM Level II, CISSP, CISM, CASP+, IAPP, CIPP/G, CIPP/US, CIPM, CIPT