> Markdown version of [/jobs/ext/4721466-issm-remote](https://www.wearedevelopers.com/jobs/ext/4721466-issm-remote). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# ISSM (Remote)

- **Company:** Zachary Piper
- **Location:** Arlington, VA, United States (Remote available)
- **Experience:** Experienced
- **Salary:** $170,000 - $180,000
- **Contract:** Permanent contract
- **Skills:** Xacta, Amazon Web Services, Cyber Security, Information Systems, Privacy Controls, Cloud Platform System, Kubernetes, RSA Archer Platform, Plan of Action and Milestones
- **Published:** November 14, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9311292/issm-remote

## About the Role

* 7+ years of experience supporting DoD cybersecurity, RMF authorization, information assurance, or related security compliance programs.
 * 3+ years of experience serving as an ISSM, Lead ISSO, or equivalent role responsible for managing multiple ATO packages.
 * 3+ years of direct federal or DoD privacy experience including PTAs, PIAs, SORN determinations, and privacy compliance activities.
 * Expert-level experience with eMASS and at least one additional GRC platform including Xacta, RegScale, or CSAM.
 * Deep knowledge of NIST 800-53 Rev 4/5, NIST 800-37 RMF, CNSSI 1253, privacy overlays, and DoD cybersecurity frameworks.
 * Experience supporting cloud environments including AWS, Kubernetes, containers, and CI/CD pipelines.
 * Strong leadership, technical writing, briefing, and stakeholder management skills.
 * IAT III Certification
 * Active Secret Security Clearance.

## Description

* Lead RMF authorization efforts, continuous monitoring activities, and risk management across multiple information systems.
 * Manage authorization packages using eMASS and other GRC platforms including Xacta, RegScale, and CSAM.
 * Direct and mentor ISSOs while conducting quality reviews of authorization documentation and compliance artifacts.
 * Author and maintain Privacy Threshold Analyses (PTAs), Privacy Impact Assessments (PIAs), and SORN determinations while implementing NIST 800-53 Rev 5 privacy controls.
 * Assess security and privacy risks, provide POA&M and risk acceptance recommendations, brief stakeholders, and maintain assessment readiness.