Information Systems Security Manager (Privacy)

Location: Remote, limited to approved U.S. hiring hubs: DC/Maryland/Virginia or Denver/Colorado Springs, Colorado. U.S. citizenship and an active U.S. Secret security clearance are required.

Salary: $170,000–$180,000 per year, plus potential equity awards and discretionary bonuses.

Company

hirify.global Systems is a public-benefit software company building secure software deployment capabilities for government and regulated networks, with a focus on U.S. national security.

What you will do

• Own authorization status, risk posture, privacy compliance, and continuous monitoring across an assigned system portfolio.
• Manage concurrent RMF workflows in eMASS and other GRC tools from categorization through continuous monitoring.
• Direct, mentor, and quality-review ISSOs and authorization packages.
• Lead privacy authorization work, including PTAs, PIAs, SORN determinations, and implementation of privacy controls.
• Map PII and CUI data flows across cloud-native systems and coordinate with ISSEs and Solutions Architects.
• Assess residual risk, recommend risk acceptance and POA&M actions, escalate material risks, and brief leadership and Authorizing Officials.

Requirements

• 7+ years of hands-on DoD cybersecurity, RMF authorization, or information assurance experience, including at least 3 years as an ISSM, lead ISSO, or equivalent accountable for multiple ATO packages.
• 3+ years of federal or DoD privacy experience authoring PTAs and PIAs, making SORN determinations, and implementing NIST 800-53 Rev. 5 privacy controls under the Privacy Act, OMB Circular A-130, OMB M-17-12, and DoDI 5400.11.
• Expert experience with eMASS and mastery of at least one additional GRC tool: Xacta, RegScale, or CSAM.
• Experience directing, mentoring, and quality-reviewing ISSOs or compliance staff across multiple concurrent authorization efforts.
• Expert knowledge of NIST 800-53 Rev. 4 and 5, NIST 800-37 RMF, CNSSI 1253 privacy overlays, and DoD implementation guidance.
• Technical literacy in cloud environments, including AWS, containers, Kubernetes, and CI/CD, with the ability to map cloud-native patterns to security and privacy controls.
• Active U.S. Secret clearance and DoD 8570/8140 IAM Level II baseline certification: CISSP, CISM, or CASP+, or ability to obtain it within 90 days.
• IAPP privacy certification—CIPP/G, CIPP/US, CIPM, or CIPT—or ability to obtain it within 6 months.
• Strong written and verbal communication skills for briefing Authorizing Officials, privacy officers, and senior leaders.
• U.S. citizenship is required.

Culture & Benefits

• Purpose-driven work supporting U.S. national security and government customers.
• Flexible remote work, flexible paid time off, and federal holidays.
• Employer-paid medical, dental, and vision coverage for employees and dependents.
• 401(k) with a 3% company contribution, equity incentive plan, and referral bonus program.
• Wellness, mental health, family planning, parental leave, professional development, technology, and home office benefits.

Hiring process

• Apply through the job page application form; the position remains open until filled and applications are reviewed on a rolling basis.