Sr Manager, DoD Information System Security

Everbridge

114d • $130,000 - $175,000

About The Position

You will lead and scale our Department of Defense (DoD) IL5 SaaS and enclave security program. As the ISSM, you’ll drive the Risk Management Framework (RMF) lifecycle from initial categorization through Authorization to Operate (ATO) and continuous monitoring. You’ll partner with engineering to implement IL5-specific controls, enforce STIG/SRG compliance, and ensure our enclave is audit-ready. You will serve as the primary interface with Authorizing Officials (AOs), Security Control Assessors (SCAs), and government stakeholders, while coaching a small team to deliver sustained security excellence.

Requirements

• 8–12+ years in cybersecurity, including 4+ years leading DoD RMF/ATO efforts.
• Prior experience supporting IL4/IL5 ATOs as an ISSO/ISSM.
• Hands-on eMASS and POA&M management expertise.
• Deep familiarity with NIST 800-53r5, DISA CC SRG, STIGs/SRGs, and continuous monitoring practices.
• Cloud security experience with AWS GovCloud, including IL5 isolation patterns.

Nice To Haves

• DoD 8570/8140 IAM III baseline certification (e.g., CISSP, CISM).
• CAP, PMP, or similar certifications preferred.

Responsibilities

• Own the RMF lifecycle: system categorization, control tailoring (NIST 800-53r5), evidence development, POA&M management, and AO briefings.
• Maintain eMASS records, packages, and artifacts; drive continuous monitoring cadence.
• Lead meeting DoD and organizational compliance obligations.
• Design, implement, and mature SP and enclave security controls (boundary protections, identity/access, logging, incident response, vulnerability & patch management).
• Ensure STIG/SRG compliance (DISA guidance) and maintain situational awareness using ACAS, Nessus, and other compliance scanning tools.
• Map and validate inherited controls from AWS GovCloud, ensuring IL5 isolation is properly documented.
• Ensure IS security measures align with applicable DoD and federal cybersecurity policies.
• Draft, review, and maintain cybersecurity policies, SOPs, and technical documentation.
• Oversee audit log monitoring, analysis, and reporting to meet DoD and organizational requirements.
• Act as primary interface with AOs, SCAs, auditors, partners, and mission owners.
• Translate risk posture, timelines, and remediation progress into executive-ready briefings.
• Support Configuration/Change Assurance Board (CAB) activities and provide risk-based recommendations.
• Supervise and mentor ISSO staff; establish operating cadence, SLAs, and dashboards.
• Prepare for SCA-V assessments and drive remediation through closure.

Benefits

• Healthcare
• Dental
• Parental planning
• Mental health benefits
• Disability income benefits
• Life and AD&D insurance
• 401(k) plan and match
• Paid time off
• Fitness reimbursements

What This Job Offers

• Career Level: Senior
• Number of Employees: 1,001-5,000 employees