ISSM (Remote)

• Lead RMF authorization efforts, continuous monitoring activities, and risk management across multiple information systems.
• Manage authorization packages using eMASS and other GRC platforms including Xacta, RegScale, and CSAM.
• Direct and mentor ISSOs while conducting quality reviews of authorization documentation and compliance artifacts.
• Author and maintain Privacy Threshold Analyses (PTAs), Privacy Impact Assessments (PIAs), and SORN determinations while implementing NIST 800-53 Rev 5 privacy controls.
• Assess security and privacy risks, provide POA&M and risk acceptance recommendations, brief stakeholders, and maintain assessment readiness.

• 7+ years of experience supporting DoD cybersecurity, RMF authorization, information assurance, or related security compliance programs.
• 3+ years of experience serving as an ISSM, Lead ISSO, or equivalent role responsible for managing multiple ATO packages.
• 3+ years of direct federal or DoD privacy experience including PTAs, PIAs, SORN determinations, and privacy compliance activities.
• Expert-level experience with eMASS and at least one additional GRC platform including Xacta, RegScale, or CSAM.
• Deep knowledge of NIST 800-53 Rev 4/5, NIST 800-37 RMF, CNSSI 1253, privacy overlays, and DoD cybersecurity frameworks.
• Experience supporting cloud environments including AWS, Kubernetes, containers, and CI/CD pipelines.
• Strong leadership, technical writing, briefing, and stakeholder management skills.
• IAT III Certification
• Active Secret Security Clearance.

• Salary Range: $170,000 - $180,000 depending on experience
• Full Benefits Package: PTO, Paid Holidays, Medical, Dental, Vision, 401K, Tuition Reimbursement, Sick Leave as required by law, Equity Program, Professional Development Stipend, Home Office Stipend, Wellness Benefits, and Parental Leave

Zachary Piper Solutions is seeking an Information Systems Security Manager (ISSM) to support a company focused on secure software delivery, cloud-based defense technology platforms, and cybersecurity compliance within regulated government environments. This position is Remote for candidates located in the DC/Maryland/Virginia regions. The Information Systems Security Manager (ISSM) will lead authorization, privacy compliance, risk management, and continuous monitoring efforts across a portfolio of mission-critical systems. This is an opportunity to drive cybersecurity and privacy strategy while supporting innovative technology solutions that enable secure operations across complex environments. This role will require on-site meet-ups in Arlington, VA one time per month.