Information Systems Security Manager

The role

You will own authorization status, risk posture, privacy compliance, and continuous monitoring for an assigned system portfolio. You will manage RMF workflows, lead privacy authorization work, and direct ISSO teams.

What you will do

• Own authorization status, risk posture, privacy compliance, and continuous monitoring health across an assigned system portfolio.
• Orchestrate concurrent RMF workflows in eMASS and other GRC tools.
• Direct and mentor ISSOs, assign work, and review authorization packages.
• Govern privacy authorization across all systems by authoring PTAs, PIAs, and SORN determinations.
• Synchronize PII and CUI data flows with ISSEs and Solutions Architects.
• Assess residual security and privacy risk and make risk acceptance and POA&M recommendations.
• Mitigate breach response risk by maintaining incident and breach-response procedures.
• Establish repeatable privacy templates, training materials, and authorization workflows.
• Report privacy posture trends to leadership.

Required qualifications

• 7+ years of hands-on DoD cybersecurity, RMF authorization, or information assurance experience.
• At least 3 years serving as ISSM, lead ISSO, or equivalent role accountable for multiple ATO packages.
• 3+ years of direct federal or DoD privacy experience.
• Expert hands-on experience managing authorization packages in eMASS.
• Mastery of at least one additional GRC tool (Xacta, RegScale, or CSAM).
• Expert knowledge of NIST 800-53 (Rev 4 and 5), NIST 800-37 RMF, CNSSI 1253 including privacy overlays, and DoD-specific implementation guidance.
• Technical literacy in cloud environments (AWS, containers, Kubernetes, CI/CD).
• Active U.S. Secret security clearance.
• DoD 8570/8140 IAM Level II baseline certification (CISSP, CISM, or CASP+) or ability to obtain within 90 days.
• IAPP privacy certification (CIPP/G, CIPP/US, CIPM, or CIPT) or ability to obtain within 6 months.
• Strong written and verbal communication skills.
• U.S. citizenship is required.

Benefits

• 100% employer-paid medical, dental, and vision coverage for you and your dependents
• 401(k) with a 3% company contribution
• Comprehensive wellness benefits including One Medical membership, mental health resources, and family planning support
• Equity incentive plan
• New hire technology and home office stipend
• Annual professional development stipend
• Flexible paid time off, plus all federal holidays
• Generous parental leave
• Flexible remote work opportunities
• Employee referral bonus program

Before you apply

• Candidates must reside in DC/Maryland/Virginia or Denver/Colorado Springs, CO.
• U.S. citizenship is required.

About the company

Second Front Systems (2F) is a public-benefit software company powering software for the free world. They eliminate friction to enable faster, more secure development and deployment of software across government and regulated networks.