{"id":3985510,"url":"https://alion.io/job/second-front-systems-information-systems-security-manager","title":"Information Systems Security Manager","company":{"id":58794,"name":"Second Front Systems","domain":"secondfront.com","url":"https://alion.io/company/second-front-systems","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":88,"open_postings":4,"ghost_share":0,"stale_share":0.5,"repost_share":0,"time_to_fill_p50_days":38,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Legal","role_family":"Legal","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":170000,"max":180000,"currency":"USD","period":"year","gross":null,"usd_annual":180000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"NIST 800-53","optional":false}],"status":"live","first_seen_at":"2026-11-09T20:54:47Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-09T21:30:33Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Information Systems Security Manager (ISSM) + Privacy\nSecond Front Systems is looking for a mission-focused, privacy-expert, decisive Information Systems Security Manager (ISSM) + Privacy to strengthen our cybersecurity and authorization function.\nOperating at the RMF and continuous monitoring cadence for a defense software platform and its customer systems, you will be responsible for owning authorization status, risk posture, privacy compliance, and continuous monitoring across an assigned system portfolio.\nYou will manage concurrent RMF workflows in eMASS and other GRC tools, lead privacy authorization work, and serve as primary government interface, ensuring that all systems maintain valid ATOs, privacy controls meet DoD and federal requirements, and residual risk is visible to leadership and Authorizing Officials.\nWe need someone capable of directing ISSO teams and quality-review authorization packages for completeness and rigor; authoring Privacy Threshold Analyses, Privacy Impact Assessments, and SORN determinations under the Privacy Act, OMB Circular A-130, and DoD 5400.11-R; and mapping PII and CUI data flows across cloud-native systems and recommending practical privacy controls aligned with NIST 800-53 Rev 5 and CNSSI 1253 privacy overlays.\nAs a key partner to Authorizing Officials, Security Control Assessors, DoD privacy officers, and customer security teams, you will brief risk and authorization status, escalate material risks, and maintain readiness for assessments and reciprocity decisions, serving as the authoritative voice on how PII is protected and authorized across the company's DoD environment.\nNote: Candidates must reside in one of our approved hiring hubs:\nDC/Maryland/Virginia\nDenver/Colorado Springs, CO This is a full-time position.\nWhat You'll Do\nOwn authorization status, risk posture, privacy compliance, and continuous monitoring health across an assigned system portfolio.\nOrchestrate concurrent RMF workflows in eMASS and other GRC tools (Xacta, RegScale, CSAM) from categorization through continuous monitoring.\nDirect and mentor ISSOs supporting the portfolio, assign work, review authorization packages for quality, and coach on security and privacy requirements.\nGovern privacy authorization across all systems, authoring PTAs, PIAs, SORN determinations, and implementing NIST 800-53 Rev 5 privacy controls and CNSSI 1253 overlays.\nSynchronize PII and CUI data flows with ISSEs and Solutions Architects to ensure accurate identification and documentation in authorization packages and system designs.\nAssess residual security and privacy risk across the portfolio, make risk acceptance and POA&M recommendations, and escalate material risks to leadership and Authorizing Officials.\nMitigate breach response risk by maintaining incident and breach-response procedures aligned with OMB M-17-12 and DoD requirements.\nEstablish repeatable privacy templates, training materials, and authorization workflows for the wider team, and report privacy posture trends to leadership.\nWhat You Bring\n7+ years of hands-on DoD cybersecurity, RMF authorization, or information assurance experience, with at least 3 years serving as ISSM, lead ISSO, or equivalent role accountable for multiple ATO packages.\n3+ years of direct federal or DoD privacy experience, including authoring PTAs and PIAs, making SORN determinations, and implementing NIST 800-53 Rev 5 privacy controls under the Privacy Act, OMB Circular A-130, OMB M-17-12, and DoDI 5400.11.\nExpert hands-on experience managing authorization packages in eMASS plus mastery of at least one additional GRC tool (Xacta, RegScale, or CSAM).\nDemonstrated ability to direct, mentor, and quality-review the work of ISSOs or compliance staff, with proven track record managing multiple concurrent authorization efforts.\nExpert knowledge of NIST 800-53 (Rev 4 and 5), NIST 800-37 RMF, CNSSI 1253 including privacy overlays, and DoD-specific implementation guidance.\nSolid technical literacy in cloud environments (AWS, containers, Kubernetes, CI/CD) and ability to map cloud-native patterns to technical security and privacy controls.\nActive U.S. Secret security clearance; DoD 8570/8140 IAM Level II baseline certification (CISSP, CISM, or CASP+) or ability to obtain within 90 days; IAPP privacy certification (CIPP/G, CIPP/US, CIPM, or CIPT) or ability to obtain within 6 months.\nStrong written and verbal communication skills, including ability to brief Authorizing Officials, privacy officers, and senior leaders on risk, authorization status, and compliance posture.\nU.S. citizenship is required for this role.\nPreferred\nThe base salary for this position will fall between $170,000 - $180,000. Your ultimate compensation will be determined by professional background, technical proficiency, seniority, and regional cost factors. Furthermore, this opportunity includes potential eligibility for equity awards and discretionary bonuses, rounding out a comprehensive total rewards offering.\nSuccess at 2F Looks Like:\nA proactive and solutions oriented mindset\nViewing obstacles as opportunities for growth\nHaving a bias toward action and tangible, measurable results\nBeing team-oriented with a focus on personal responsibility and autonomy\nPerks & Benefits:\nThis role is a full time position. As a public benefit corporation, we’re a team of purpose-driven trailblazers transforming the future of U.S. national security. We hire the best to do their best and, as such, we are committed to providing the perks and benefits you need to be successful-both in- and outside the workplace.\nPerks of Joining Our Team:\nCompetitive salary\n100% employer-paid medical, dental, and vision coverage for you and your dependents\n401(k) with a 3% company contribution\nComprehensive wellness benefits, including a One Medical membership, mental health resources, family planning support, and more\nEquity incentive plan\nNew hire technology and home office stipend\nAnnual professional development stipend\nFlexible paid time off, plus all federal holidays\nGenerous parental leave\nFlexible remote work opportunities\nEmployee referral bonus program Visit our careers page to learn more.\nWho We Are:\nSecond Front Systems (2F) is a public-benefit software company powering software for the free world. We eliminate the friction that slows innovation, enabling faster, more secure development and deployment of software across government and regulated networks. Built by national security veterans and backed by top-tier venture capital, our platform is trusted by the world’s leading organizations to cut deployment timelines from years to weeks. We move fast, solve hard problems, and deliver trusted capabilities where they’re needed most. Our work strengthens global security and gives the United States and its allies a lasting competitive advantage. Learn more at secondfront.com.\nCitizenship requirement:\nThis position requires U.S. citizenship due to the nature of our work supporting U.S. government and defense customers.\nOne last thing:\nWe are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law.\nAre you ready to join our team:\nTo apply, click the “Apply for This Job” button at the top or bottom of this page and complete the application form. This position will remain open until filled, and applications will be reviewed on a rolling basis.\nState notices:\nColorado:\nIn accordance with Colorado law, applicants may redact their date of birth, dates of attendance, and dates of graduation from any uploaded documents.\nMaryland:\nUnder Maryland law, an employer may not require or demand, as a condition of employment, prospective employment, or continued employment, that an individual submit to or take a polygraph examination or similar test. An employer who violates this law is guilty of a misdemeanor and subject to a fine not exceeding $100.","description_format":"text","description_chars":8123,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["Equity","Home office","Parental leave","Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Virginia","iso":null,"kind":"city"},{"name":"Maryland","iso":null,"kind":"city"},{"name":"Colorado","iso":null,"kind":"city"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Digital Government","Security Compliance"],"lifecycle":[{"event":"open","at":"2026-11-09T21:30:33Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":38,"reasons":["conf:0","win:early"],"computed_at":"2026-11-09T22:14:12Z"},"pay":{"stated_usd_annual":180000,"is_top_pay":false},"html_url":"https://alion.io/job/second-front-systems-information-systems-security-manager","json_url":"https://alion.io/job/second-front-systems-information-systems-security-manager.json","meta":{"generated_at":"2026-11-09T22:14:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11554,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58794},"rest":"https://alion.io/mcp/rest/get_company?id=58794"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsecond-front-systems-information-systems-security-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsecond-front-systems-information-systems-security-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsecond-front-systems-information-systems-security-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/second-front-systems-information-systems-security-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsecond-front-systems-information-systems-security-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3985510}},{"tool":"search_jobs","arguments":{"company":"secondfront.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3985510},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}