Ensure system security requirements are integrated into design, development, and configuration, coordinate changes, enforce DoD cybersecurity policies, document and maintain security posture to achieve IATT and ATO.
Compensation
The projected compensation range for this position is $61,900.00 to $141,000.00 (annualized USD).
Responsibilities
Ensure security requirements are integrated into system design and development
Coordinate changes with Information System Security Manager
Implement and enforce DoD cybersecurity policies and procedures
Document, monitor, update, and manage systems to maintain security posture
Achieve Interim Authority to Test (IATT) and Authority to Operate (ATO)
Requirements
Associate's degree and 7+ years of experience in cybersecurity
Bachelor’s degree and 3+ years of experience in cybersecurity
9+ years of experience in cybersecurity in lieu of a degree
Nice to have: Abstract security requirements application
Nice to have: Advising environments and communicating technical subjects to clients
The Authorizations and Assessments Manager is responsible for the ITD Risk Management Framework and A&A portfolio across information systems, applications, enclaves, cloud environments, and system interconnections. The position leads approximately four Information System Security Managers and their Information System Security Officer teams, totaling more than 20 cybersecurity personnel, and is accountable for A&A quality, timeliness, authorization readiness, continuous monitoring, vulnerability remediation, and cybersecurity risk reporting.
Compensation
Estimated Salary/Wage
USD $175,200.00/Yr. Up to USD $200,000.00/Yr.
Responsibilities
Lead and manage the directorate wide RMF and A&A portfolio for systems, applications, cloud environments, enclaves, and interconnections.
Direct and mentor ISSMs and ISSO teams.
Ensure timely, accurate, and complete A&A packages and supporting security documentation, including System Security Plans, security assessment artifacts, POA&Ms, contingency plans, incident response documentation, control implementation statements, and continuous monitoring evidence.
Lead and manage the directorate wide RMF and A&A portfolio for systems, applications, cloud environments, enclaves, and interconnections.
Compensation
USD $175,200.00/Yr. Up to USD $200,000.00/Yr.
Responsibilities
Lead and manage the directorate wide RMF and A&A portfolio for systems, applications, cloud environments, enclaves, and interconnections.
Direct and mentor ISSMs and ISSO teams. Establish workforce priorities, roles, performance expectations, workload assignments, cross training, quality standards, and escalation procedures.
Ensure timely, accurate, and complete A&A packages and supporting security documentation, including System Security Plans, security assessment artifacts, POA&Ms, contingency plans, incident response documentation, control implementation statements, and continuous monitoring evidence.
Support the secure deployment and continuous authorization of IronSled, an enterprise Platform as a Service built for federal missions, maintaining the ATO posture and driving vulnerability management.
Compensation
Target salary range: $111,427 - $200,000
Responsibilities
Lead Risk Management Framework (RMF) activities for the LIGER deployment, including system categorization, control selection and tailoring, implementation, assessment, and continuous monitoring
Own and maintain authorization artifacts: System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Report (SAR), Plan of Action and Milestones (POA&M), and supporting documentation aligned to DHS requirements
Coordinate directly with ISSOs, Authorizing Officials, and cyber working groups to advance ATO and continuous authorization activities
Interpret NIST 800-53 controls in the context of the LIGER platform and translate them into actionable engineering requirements
Run and review vulnerability scans across CI/CD pipelines and runtime environments, triage findings, and drive remediation through the engineering team
Requirements
Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field
Nice to have: DHS 4300A
Nice to have: FedRAMP readiness or assessment
Nice to have: Container and Kubernetes security (EKS, image scanning, admission control, runtime protection)
Oversee Risk Management Framework (RMF) authorization activities, continuous monitoring, and privacy compliance across a portfolio of defense and government systems as an Information Systems Security Manager (ISSM).
Lead cybersecurity governance, risk management, and compliance for classified information systems supporting cyber intelligence programs in San Diego, CA.
Compensation
In compliance with pay transparency requirements, the salary range for this role in California, Massachusetts, New Jersey, Washington, and the Greater D.C, Denver, or NYC areas is $127,000 - $236,500.
Responsibilities
Lead the information system security program for assigned classified systems
Manage RMF activities including system categorization, security control implementation, assessment support, authorization, and continuous monitoring
Develop, maintain, and review authorization documentation
Coordinate with government authorizing officials, security control assessors, customers, and internal stakeholders
Oversee vulnerability management, configuration compliance, audit logging, access controls, and remediation of security findings
Requirements
Bachelor's Degree
Graduate Degree
Nice to have: CISSP
Nice to have: CISM
Nice to have: Experience with DCSA assessment and authorization guidance
Annual base salary of $170,000–$180,000, depending on professional background, technical expertise, seniority, and regional factors.
Responsibilities
Own authorization status, security risk posture, privacy compliance, and continuous monitoring activities across an assigned portfolio of information systems.
Manage multiple concurrent Risk Management Framework (RMF) workflows through eMASS and other Governance, Risk, and Compliance (GRC) platforms.
Direct, mentor, and coordinate ISSO teams.
Lead privacy authorization activities across systems, including the preparation of Privacy Threshold Analyses (PTAs), Privacy Impact Assessments (PIAs), and System of Records Notice (SORN) determinations.
Implement and oversee privacy controls aligned with the Privacy Act, OMB Circular A-130, OMB M-17-12, DoDI 5400.11, NIST SP 800-53 Revision 5, and CNSSI 1253 privacy overlays.
Authorizations and Assessments ManagerNewChenega Naswik International, LLC · Arlington, US
Cybersecurity Engineer - Clearance RequiredNewLMI · Colorado Springs, US
Information Systems Security ManagerNewJobgether · Remote, US+4 more
Cyber Intelligence Manager (ISSM)NewL3HHCM20 · San Diego, US
Systems Engineer SMENewCherokee Federal · Chantilly, US
Senior Information Systems Security OfficerGlobal Dimensions, LLC · Annapolis, US+2 more
Information System Security Officer (ISSO)PeopleTec · Huntsville, US