Information Systems Security Manager
Core
Own authorization status, risk posture, privacy compliance, and continuous monitoring for a defense software platform and its customer systems.
Role type
Senior Information Systems Security Manager (ISSM) + Privacy
Builds
Valid Authorizations to Operate (ATOs) and privacy-compliant DoD systems
Domain
U.S. Defense / Cybersecurity & Privacy
Required skills
RMF authorization management, Privacy Impact Assessments (PIA), Security Control Assessments, Risk management, Cloud security architecture, Incident response planning, Team leadership, GRC tool proficiency, Regulatory compliance analysis
Preferred skills
NIST 800-53 Rev 5 implementation, CNSSI 1253 privacy overlays, Cloud-native system design, Breach response procedures
Technologies
eMASS, Xacta, RegScale, CSAM, AWS, Kubernetes, CI/CD
Responsibilities
Manage concurrent RMF workflows in eMASS and other GRC tools; Direct and mentor ISSO teams; Author Privacy Threshold Analyses and Privacy Impact Assessments; Map PII and CUI data flows across cloud-native systems; Assess residual security and privacy risk; Mitigate breach response risk; Establish repeatable privacy templates and training materials
Seniority
Senior, hands-on IC with mentorship responsibilities
