Information Systems Security Manager

Zachary Piper Solutions is seeking an Information Systems Security Manager to support a high-visibility National Security contract in Arlington, VA (100% onsite). The Information Systems Security Manager will bring deep expertise in DoD cybersecurity governance, RMF execution, & enterprise ISSM operations supporting emerging AI, data, and analytics capabilities. The ISSM will play a critical role in maturing enterprise cybersecurity practices, managing authorization workflows, mentoring personnel, & ensuring consistent, scalable security operations across a fast-paced and mission-critical environment.

Responsibilities of the Information Systems Security Manager include:

• Lead Program Operations: Serve as the primary contract point of contact, managing day-to-day activities, priorities, deliverables, & stakeholder coordination
• Manage RMF & Authorization Workflows: Oversee authorization activities in eMASS, including package development, approvals, inheritance, reciprocity, & continuous monitoring
• Drive Enterprise Governance: Support development & maturation of the ISSM program, standardizing processes, policies, & cybersecurity practices
• Track Program Execution: Manage schedules, tasking, risks, dependencies, & deliverables across cybersecurity workstreams
• Facilitate Team Coordination: Lead meetings, status briefings, & working sessions with Government & contractor stakeholders
• Support Workforce Operations: Coordinate onboarding/offboarding, knowledge transfer, & team integration activities
• Develop Policies & Documentation: Author and maintain SOPs, governance frameworks, process guides, & implementation documentation
• Enable Control Inheritance: Define & operationalize enterprise-level controls in eMASS, reducing redundancy & improving scalability of ATO processes
• Mentor Cyber Personnel: Provide guidance & mentorship to ISSMs, ISSOs, & cybersecurity staff to ensure consistency and quality
• Support Training Initiatives: Develop & deliver ISSM training, educational sessions, & knowledge-sharing materials
• Standardize Artifacts: Create reusable templates & standardized Body of Evidence artifacts to enhance authorization package quality
• Oversee Continuous Monitoring: Support enterprise ConMon activities & ongoing cybersecurity oversight across systems
  
  

Qualifications of the ISSM includes:

• 10 years of cybersecurity experience
• Proven experience managing RMF A&A activities & authorization packages using eMASS or similar GRC tools
• Strong knowledge of DoD cybersecurity policies and frameworks
• Experience developing cybersecurity policies, SOPs, governance frameworks, & operational procedures
• Demonstrated ability to manage program execution, task tracking, & stakeholder communication in fast-paced environments
• Experience implementing control inheritance strategies & enterprise cybersecurity standardization
• Ability to mentor and develop cybersecurity personnel across multiple programs
• Strong written & verbal communication skills with the ability to brief senior military, civilian, & SES leadership
• Familiarity with continuous monitoring, FedRAMP, & federal A&A processes
• Active TS clearance required
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (Master’s preferred or equivalent experience)
• IAT/IAM certification
• Experience supporting OSD, Joint Staff, or Military Service components
• Hands-on experience with eMASS, Xacta, or similar GRC platforms
• Experience supporting FedRAMP and federal authorization processes
  
  

Compensation for the ISSM includes:

• Salary Range: $140,000 – $165,000 depending on experience
• Full Benefits Package: PTO, Paid Holidays, Medical, Dental, Vision, 401K, Tuition Reimbursement, Sick leave as required by law
  
  

Keywords: Information Systems Security Manager (ISSM), DoD Cybersecurity, Risk Management Framework (RMF), Authorization to Operate (ATO), eMASS, Governance Risk and Compliance (GRC), Cybersecurity Governance, Continuous Monitoring (ConMon), Authorization & Accreditation (A&A), Enterprise Security Operations, Control Inheritance, Security Controls, NIST Frameworks, FedRAMP, Defense Information Systems, National Security Systems, Cyber Policy Development, Standard Operating Procedures (SOPs), Security Documentation, Body of Evidence (BOE), System Authorization Packages, Vulnerability Management, Compliance Management, Program Management, Stakeholder Engagement, Task & Risk Management, Security Architecture, AI & Data Security, Enterprise IT Security, Xacta, Security Training & Mentorship, Workforce Development, TS/SCI Clearance, IAT/IAM Certification, DoD 8570/8140, Federal Information Security, OSD Support, Joint Staff Experience, Mission-Critical Systems