Information Systems Security Manager

Job not on LinkedIn

🔥 2 hours ago

⛰️ Colorado, Maryland – Remote

⛰️ Colorado – Remote 🦀 Maryland – Remote

💵 $170k - $180k / year

⏰ Full Time

🟠 Senior

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 12%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Second Front Systems

WebsiteLinkedInAll Job Openings

51 - 200 employees

☁️ SaaS

🎖️ Defense

🏛️ Government

SaaS • Defense • Government

Second Front Systems is a public-benefit, venture-backed company that provides mission-critical software solutions primarily to democracies around the world. Their product suite, which includes the 2F Suite, 2F Workshop, 2F Game Warden, and 2F Frontier, simplifies and accelerates the software development and delivery process. The company is trusted by leading software providers and government agencies for its secure DevSecOps solutions, enabling secure software deployment on classified and unclassified networks. Their offerings include tools for secure development, software accreditation, government cloud hosting, and edge deployment, particularly focused on supporting government and defense sectors. Second Front Systems collaborates with partners to make emerging technologies more accessible, accelerating the accreditation and compliance processes and offering solutions that can operate in remote or disconnected environments, such as drones and vehicles.

📋 Description

• Own authorization status, risk posture, privacy compliance, and continuous monitoring health across an assigned system portfolio • Orchestrate concurrent RMF workflows in eMASS and other GRC tools from categorization through continuous monitoring • Direct and mentor ISSOs, assign work, review authorization packages for quality, and coach on security and privacy requirements • Govern privacy authorization across all systems, authoring PTAs, PIAs, SORN determinations, and implementing NIST 800-53 Rev 5 privacy controls and CNSSI 1253 overlays • Synchronize PII and CUI data flows with ISSEs and Solutions Architects • Assess residual security and privacy risk, make risk acceptance and POA&M recommendations, and escalate material risks to leadership and Authorizing Officials • Maintain incident and breach-response procedures aligned with OMB M-17-12 and DoD requirements • Establish privacy templates, training materials, and authorization workflows • Report privacy posture trends to leadership • Serve as primary government interface and authoritative voice on PII protection and authorization across the company’s DoD environment

🎯 Requirements

• 7+ years of hands-on DoD cybersecurity, RMF authorization, or information assurance experience, with at least 3 years serving as ISSM, lead ISSO, or equivalent role accountable for multiple ATO packages • 3+ years of direct federal or DoD privacy experience, including authoring PTAs and PIAs, making SORN determinations, and implementing NIST 800-53 Rev 5 privacy controls under the Privacy Act, OMB Circular A-130, OMB M-17-12, and DoDI 5400.11 • Expert hands-on experience managing authorization packages in eMASS plus mastery of at least one additional GRC tool (Xacta, RegScale, or CSAM) • Demonstrated ability to direct, mentor, and quality-review the work of ISSOs or compliance staff, with proven track record managing multiple concurrent authorization efforts • Expert knowledge of NIST 800-53 (Rev 4 and 5), NIST 800-37 RMF, CNSSI 1253 including privacy overlays, and DoD-specific implementation guidance • Solid technical literacy in cloud environments (AWS, containers, Kubernetes, CI/CD) and ability to map cloud-native patterns to technical security and privacy controls • Active U.S. Secret security clearance • DoD 8570/8140 IAM Level II baseline certification (CISSP, CISM, or CASP+) or ability to obtain within 90 days • IAPP privacy certification (CIPP/G, CIPP/US, CIPM, or CIPT) or ability to obtain within 6 months • Strong written and verbal communication skills, including ability to brief Authorizing Officials, privacy officers, and senior leaders on risk, authorization status, and compliance posture • U.S. citizenship is required for this role • Candidates must reside in one of the approved hiring hubs: DC/Maryland/Virginia or Denver/Colorado Springs, CO

🏖️ Benefits

• 100% employer-paid medical, dental, and vision coverage for you and your dependents • 401(k) with a 3% company contribution • Comprehensive wellness benefits, including a One Medical membership, mental health resources, family planning support, and more • Equity incentive plan • New hire technology and home office stipend • Annual professional development stipend • Flexible paid time off, plus all federal holidays • Generous parental leave • Flexible remote work opportunities • Employee referral bonus program • Potential eligibility for discretionary bonuses

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume